General

  • Target

    63159d86806f524ad4368e43ee8afa981a36eb66c5c83d3d9a2683a9b2911ca8

  • Size

    4.9MB

  • Sample

    231124-ph549aaf83

  • MD5

    c01a4508132a6b931dc48ca0d4454c6f

  • SHA1

    16b75503ea92cf17fc9705042f7ca620a8f01b64

  • SHA256

    63159d86806f524ad4368e43ee8afa981a36eb66c5c83d3d9a2683a9b2911ca8

  • SHA512

    69620050d6ab346f865e21089e249778a8af41e8cfae88fd4216b4a5ef6cc4fb4188742ae212c7894f49741945420853c820bbe5da84b67174332d2bd6d7e128

  • SSDEEP

    98304:vc5LyCUfJ+K0OBvdcTIjudjbaS2mCWk/lS5pXHBN+zkQZMFzriQEQYlE:EzUfJ+K0OHcIjudbh21WQlSvBAEGQYu

Score
7/10

Malware Config

Targets

    • Target

      63159d86806f524ad4368e43ee8afa981a36eb66c5c83d3d9a2683a9b2911ca8

    • Size

      4.9MB

    • MD5

      c01a4508132a6b931dc48ca0d4454c6f

    • SHA1

      16b75503ea92cf17fc9705042f7ca620a8f01b64

    • SHA256

      63159d86806f524ad4368e43ee8afa981a36eb66c5c83d3d9a2683a9b2911ca8

    • SHA512

      69620050d6ab346f865e21089e249778a8af41e8cfae88fd4216b4a5ef6cc4fb4188742ae212c7894f49741945420853c820bbe5da84b67174332d2bd6d7e128

    • SSDEEP

      98304:vc5LyCUfJ+K0OBvdcTIjudjbaS2mCWk/lS5pXHBN+zkQZMFzriQEQYlE:EzUfJ+K0OHcIjudbh21WQlSvBAEGQYu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks