General

  • Target

    8ea0e47f0d999842f7be32c3fccf769876e872862852e4e09c037ece8c5eca44

  • Size

    4.9MB

  • Sample

    231124-p2f98sah92

  • MD5

    ecf962bd92f5083384c42c16b16a1871

  • SHA1

    8665ea7bfd5909ab8780f1409517eefab042a905

  • SHA256

    8ea0e47f0d999842f7be32c3fccf769876e872862852e4e09c037ece8c5eca44

  • SHA512

    32787790496781f79f8b0aabf5c34986ee4c228fe54a2051cfbf4caef2b2808a105564ca5fb26415135860ec2d464d1a78c5ac800d100db6ccd32fb9d917d315

  • SSDEEP

    98304:jc5LyCUfJ+K0OBvdcTIjudjbaS2mCWk/lS5pXHBN+zkQZMFzriQEQYlE:gzUfJ+K0OHcIjudbh21WQlSvBAEGQYu

Score
7/10

Malware Config

Targets

    • Target

      8ea0e47f0d999842f7be32c3fccf769876e872862852e4e09c037ece8c5eca44

    • Size

      4.9MB

    • MD5

      ecf962bd92f5083384c42c16b16a1871

    • SHA1

      8665ea7bfd5909ab8780f1409517eefab042a905

    • SHA256

      8ea0e47f0d999842f7be32c3fccf769876e872862852e4e09c037ece8c5eca44

    • SHA512

      32787790496781f79f8b0aabf5c34986ee4c228fe54a2051cfbf4caef2b2808a105564ca5fb26415135860ec2d464d1a78c5ac800d100db6ccd32fb9d917d315

    • SSDEEP

      98304:jc5LyCUfJ+K0OBvdcTIjudjbaS2mCWk/lS5pXHBN+zkQZMFzriQEQYlE:gzUfJ+K0OHcIjudbh21WQlSvBAEGQYu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks