General

  • Target

    ac3cb700a5bccfb51295bb9565e885b12d2f257eac2ca597c429f07c6f4e6127

  • Size

    4.9MB

  • Sample

    231124-xbhpdaec7x

  • MD5

    f5198fab508b44712d001d61bb7c29c6

  • SHA1

    bed6658e75878cf3c8d5b6c456cb1aa0816d14f7

  • SHA256

    ac3cb700a5bccfb51295bb9565e885b12d2f257eac2ca597c429f07c6f4e6127

  • SHA512

    af4c531f28a462f1ddcf5b78500ff20e27fdcfe190659fd88bccfc2fc647359a5e0c0e1d10b0bb2b2e6ceb5f4cb44356807be21446a66a4e988e79fce15e5220

  • SSDEEP

    98304:Ac5LyCUfJ+K0OBvdcTIjudjbaS2mCWk/lS5pXHBN+zkQZMFzriQEQYlE:/zUfJ+K0OHcIjudbh21WQlSvBAEGQYu

Score
7/10

Malware Config

Targets

    • Target

      ac3cb700a5bccfb51295bb9565e885b12d2f257eac2ca597c429f07c6f4e6127

    • Size

      4.9MB

    • MD5

      f5198fab508b44712d001d61bb7c29c6

    • SHA1

      bed6658e75878cf3c8d5b6c456cb1aa0816d14f7

    • SHA256

      ac3cb700a5bccfb51295bb9565e885b12d2f257eac2ca597c429f07c6f4e6127

    • SHA512

      af4c531f28a462f1ddcf5b78500ff20e27fdcfe190659fd88bccfc2fc647359a5e0c0e1d10b0bb2b2e6ceb5f4cb44356807be21446a66a4e988e79fce15e5220

    • SSDEEP

      98304:Ac5LyCUfJ+K0OBvdcTIjudjbaS2mCWk/lS5pXHBN+zkQZMFzriQEQYlE:/zUfJ+K0OHcIjudbh21WQlSvBAEGQYu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks