General

  • Target

    985f4b1b4850a51364a08de168554c8cc0eb020b780509d38c650a87e86a0b7e

  • Size

    4.8MB

  • Sample

    231125-d8wgysha81

  • MD5

    588f5610d808e293e032ce5d17cbb523

  • SHA1

    d82e0d8fd6aa9e0e6b91fe1a8bc64ff2b5cae456

  • SHA256

    985f4b1b4850a51364a08de168554c8cc0eb020b780509d38c650a87e86a0b7e

  • SHA512

    b1b395e92aaf6d383c9aa66e1c1f0bd85084a24f5223ea22c0bb0e251194ad563107239a18afdcca96f40dd32ded615057ee53b4ca16bcf356da70b475a7b8b5

  • SSDEEP

    98304:lxom9PZzeEqTbBdqHlK1ZpxdwEbHG6Vhti2+4dnsD9IhilE:L19PlCTW2v1BhBsD9Isu

Score
7/10

Malware Config

Targets

    • Target

      985f4b1b4850a51364a08de168554c8cc0eb020b780509d38c650a87e86a0b7e

    • Size

      4.8MB

    • MD5

      588f5610d808e293e032ce5d17cbb523

    • SHA1

      d82e0d8fd6aa9e0e6b91fe1a8bc64ff2b5cae456

    • SHA256

      985f4b1b4850a51364a08de168554c8cc0eb020b780509d38c650a87e86a0b7e

    • SHA512

      b1b395e92aaf6d383c9aa66e1c1f0bd85084a24f5223ea22c0bb0e251194ad563107239a18afdcca96f40dd32ded615057ee53b4ca16bcf356da70b475a7b8b5

    • SSDEEP

      98304:lxom9PZzeEqTbBdqHlK1ZpxdwEbHG6Vhti2+4dnsD9IhilE:L19PlCTW2v1BhBsD9Isu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks