General

  • Target

    3064dba2b7a8b176a52bfe21f183afca15d16d8a492dea688d52d3030b635237

  • Size

    4.7MB

  • Sample

    231125-p3dwhaaf42

  • MD5

    afb3880374ed4a6674843fffa31e1506

  • SHA1

    5eba1ffc921e25a0d3862656d37cfb9dca1d0d9f

  • SHA256

    3064dba2b7a8b176a52bfe21f183afca15d16d8a492dea688d52d3030b635237

  • SHA512

    ca2b9885e44b657811e11f1a3081e830a590c5531af19b6321a1e6bf961e2d045ffcef1cb9511c04e12110d7e922220a579fd2954aac1e5b526ac964984df5f7

  • SSDEEP

    98304:u97cNs/UXcxK6lgcdOuTdSkSUxCvaM83LWNmFFJSngWsFpODtLyimgYoGnlE:bEOupSkShQLBFFsOFGPmVoUu

Score
7/10

Malware Config

Targets

    • Target

      3064dba2b7a8b176a52bfe21f183afca15d16d8a492dea688d52d3030b635237

    • Size

      4.7MB

    • MD5

      afb3880374ed4a6674843fffa31e1506

    • SHA1

      5eba1ffc921e25a0d3862656d37cfb9dca1d0d9f

    • SHA256

      3064dba2b7a8b176a52bfe21f183afca15d16d8a492dea688d52d3030b635237

    • SHA512

      ca2b9885e44b657811e11f1a3081e830a590c5531af19b6321a1e6bf961e2d045ffcef1cb9511c04e12110d7e922220a579fd2954aac1e5b526ac964984df5f7

    • SSDEEP

      98304:u97cNs/UXcxK6lgcdOuTdSkSUxCvaM83LWNmFFJSngWsFpODtLyimgYoGnlE:bEOupSkShQLBFFsOFGPmVoUu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks