General

  • Target

    a894d5ec7cd5bac6ecd59e6aa3eca0d0f5e2861b13a9628a167d59b16b2f9d66

  • Size

    4.9MB

  • Sample

    231124-vkye3sdg3s

  • MD5

    75bbc0291cf8230973d6c9c4ea4bf3e3

  • SHA1

    f74eb42d4cbca7f92240c03e84f5c3f8fd387ed7

  • SHA256

    a894d5ec7cd5bac6ecd59e6aa3eca0d0f5e2861b13a9628a167d59b16b2f9d66

  • SHA512

    64924011dff1d46a9b0fb9231bc04b77f5d9ad16410086edf9d7d3469a5da9b2f0b3240c1bfddc94ae1506743048223647d808198c8d75093cc4596fb1b5da09

  • SSDEEP

    98304:0d3L0TpNwgdnac+LdvXVajAqlxgc92ca6Qc3zQxHI7Fya0pYrAKlE:A3Lq6gdna/raEqwzca6QcjDopKu

Score
7/10

Malware Config

Targets

    • Target

      a894d5ec7cd5bac6ecd59e6aa3eca0d0f5e2861b13a9628a167d59b16b2f9d66

    • Size

      4.9MB

    • MD5

      75bbc0291cf8230973d6c9c4ea4bf3e3

    • SHA1

      f74eb42d4cbca7f92240c03e84f5c3f8fd387ed7

    • SHA256

      a894d5ec7cd5bac6ecd59e6aa3eca0d0f5e2861b13a9628a167d59b16b2f9d66

    • SHA512

      64924011dff1d46a9b0fb9231bc04b77f5d9ad16410086edf9d7d3469a5da9b2f0b3240c1bfddc94ae1506743048223647d808198c8d75093cc4596fb1b5da09

    • SSDEEP

      98304:0d3L0TpNwgdnac+LdvXVajAqlxgc92ca6Qc3zQxHI7Fya0pYrAKlE:A3Lq6gdna/raEqwzca6QcjDopKu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks