General

  • Target

    1a1c12b78e656a77899d11b445fe12b1e73e4b3b45154dba6ad5885a7968ea79

  • Size

    4.0MB

  • Sample

    231124-zwbgxaec38

  • MD5

    5cf046308035fc90d98360ab74eb95d6

  • SHA1

    c9dd51f77c641de0d9d095faf7de24e83c022074

  • SHA256

    1a1c12b78e656a77899d11b445fe12b1e73e4b3b45154dba6ad5885a7968ea79

  • SHA512

    92d94ed6e38c644025ccbd8105fc70c27e13529ee02d5a1d8b3ecabcd12400d34675e0534d2e83b49ff34dc43213313349c358eb8844b60862866b25ba597aec

  • SSDEEP

    98304:NdHsdNZFu6xd3CZangMbxlif4HwNoVnH6vhkL+unlqnf7e:3HsdNZFu4Co0fEw6VnHoPnf7e

Score
7/10

Malware Config

Targets

    • Target

      1a1c12b78e656a77899d11b445fe12b1e73e4b3b45154dba6ad5885a7968ea79

    • Size

      4.0MB

    • MD5

      5cf046308035fc90d98360ab74eb95d6

    • SHA1

      c9dd51f77c641de0d9d095faf7de24e83c022074

    • SHA256

      1a1c12b78e656a77899d11b445fe12b1e73e4b3b45154dba6ad5885a7968ea79

    • SHA512

      92d94ed6e38c644025ccbd8105fc70c27e13529ee02d5a1d8b3ecabcd12400d34675e0534d2e83b49ff34dc43213313349c358eb8844b60862866b25ba597aec

    • SSDEEP

      98304:NdHsdNZFu6xd3CZangMbxlif4HwNoVnH6vhkL+unlqnf7e:3HsdNZFu4Co0fEw6VnHoPnf7e

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks