General

  • Target

    b1831f858fdf32f1e432f86eef6e64cb7c21ddfaba41e345c0b643d36b2550f4

  • Size

    4.9MB

  • Sample

    231124-wpbbsaea81

  • MD5

    c58fc133a3a72dc50dad1fefc5ce26bc

  • SHA1

    f7dd4bb0c69b893457f27e53996a47a158d5a6e1

  • SHA256

    b1831f858fdf32f1e432f86eef6e64cb7c21ddfaba41e345c0b643d36b2550f4

  • SHA512

    46841e2faeb3812a3167fcd86c0e07a73d011f594984a6ff6984e179ed3eef7c3104aa530b620ae32abb20a64044cf67963a54079bf4456731350476371315bb

  • SSDEEP

    98304:yc5LyCUfJ+K0OBvdcTIjudjbaS2mCWk/lS5pXHBN+zkQZMFzriQEQYlE:ZzUfJ+K0OHcIjudbh21WQlSvBAEGQYu

Score
7/10

Malware Config

Targets

    • Target

      b1831f858fdf32f1e432f86eef6e64cb7c21ddfaba41e345c0b643d36b2550f4

    • Size

      4.9MB

    • MD5

      c58fc133a3a72dc50dad1fefc5ce26bc

    • SHA1

      f7dd4bb0c69b893457f27e53996a47a158d5a6e1

    • SHA256

      b1831f858fdf32f1e432f86eef6e64cb7c21ddfaba41e345c0b643d36b2550f4

    • SHA512

      46841e2faeb3812a3167fcd86c0e07a73d011f594984a6ff6984e179ed3eef7c3104aa530b620ae32abb20a64044cf67963a54079bf4456731350476371315bb

    • SSDEEP

      98304:yc5LyCUfJ+K0OBvdcTIjudjbaS2mCWk/lS5pXHBN+zkQZMFzriQEQYlE:ZzUfJ+K0OHcIjudbh21WQlSvBAEGQYu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks