General

  • Target

    d53bf5a36d02098b8f018b0cb9f84e04df201d0226e183ef43876a7a64ab5b28

  • Size

    5.2MB

  • Sample

    231124-mflayshg48

  • MD5

    454d2a57266ec8325261bcfcb41ec57f

  • SHA1

    79cdbafea315faada1a990184421d8c537d1c252

  • SHA256

    d53bf5a36d02098b8f018b0cb9f84e04df201d0226e183ef43876a7a64ab5b28

  • SHA512

    8273207613e675e25a641b98a509d4c58ab75cdaed34390d2caf96afb15deb5fb1ba10f77ae7818674ac6d7240b7d27532bc48830d114507a74ac53bb12b6266

  • SSDEEP

    98304:n4UQ13eDvQYGAyN/N99Ewn91ougfcSndlhRwcY3m5MXQBLuYZq0lE:7NTQUyJN99EjfRdlhRhY3UBLFFu

Score
7/10

Malware Config

Targets

    • Target

      d53bf5a36d02098b8f018b0cb9f84e04df201d0226e183ef43876a7a64ab5b28

    • Size

      5.2MB

    • MD5

      454d2a57266ec8325261bcfcb41ec57f

    • SHA1

      79cdbafea315faada1a990184421d8c537d1c252

    • SHA256

      d53bf5a36d02098b8f018b0cb9f84e04df201d0226e183ef43876a7a64ab5b28

    • SHA512

      8273207613e675e25a641b98a509d4c58ab75cdaed34390d2caf96afb15deb5fb1ba10f77ae7818674ac6d7240b7d27532bc48830d114507a74ac53bb12b6266

    • SSDEEP

      98304:n4UQ13eDvQYGAyN/N99Ewn91ougfcSndlhRwcY3m5MXQBLuYZq0lE:7NTQUyJN99EjfRdlhRhY3UBLFFu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks