General

  • Target

    35ccf8ecd0a403db4626ca8c959480fed29cb9daccdd479c734651ee8f420d36

  • Size

    4.8MB

  • Sample

    231124-z2zfxsfb2x

  • MD5

    1bb56a25d5904e912237e170abb12eca

  • SHA1

    30e61e28c1940991e042e2583a4bd4359135c93c

  • SHA256

    35ccf8ecd0a403db4626ca8c959480fed29cb9daccdd479c734651ee8f420d36

  • SHA512

    286cf91d2c569a68e82bd1407819b3cc2b48e30a362e4c8f2af3a7607d6ad4618c1c6ef5282e5d981e979919e2fa8e94fe660ac4206e4377bf4f7b82d41c9a54

  • SSDEEP

    98304:Yxom9PZzeEqTbBdqHlK1ZpxdwEbHG6Vhti2+4dnsD9IhilE:019PlCTW2v1BhBsD9Isu

Score
7/10

Malware Config

Targets

    • Target

      35ccf8ecd0a403db4626ca8c959480fed29cb9daccdd479c734651ee8f420d36

    • Size

      4.8MB

    • MD5

      1bb56a25d5904e912237e170abb12eca

    • SHA1

      30e61e28c1940991e042e2583a4bd4359135c93c

    • SHA256

      35ccf8ecd0a403db4626ca8c959480fed29cb9daccdd479c734651ee8f420d36

    • SHA512

      286cf91d2c569a68e82bd1407819b3cc2b48e30a362e4c8f2af3a7607d6ad4618c1c6ef5282e5d981e979919e2fa8e94fe660ac4206e4377bf4f7b82d41c9a54

    • SSDEEP

      98304:Yxom9PZzeEqTbBdqHlK1ZpxdwEbHG6Vhti2+4dnsD9IhilE:019PlCTW2v1BhBsD9Isu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks