General

  • Target

    5e2945c50e6cb69757288c41f62f8ee59da9a5c165a23f203f62d6fc03d5a22e

  • Size

    4.6MB

  • Sample

    231125-tmqycabd65

  • MD5

    4dc5c5b0fbed965ec98a7516c92f817e

  • SHA1

    9f7beb2fd95794b64de746bf9f1cca1bab7cb83b

  • SHA256

    5e2945c50e6cb69757288c41f62f8ee59da9a5c165a23f203f62d6fc03d5a22e

  • SHA512

    bc7728cef44aa25e4a274cc13c0f9edf836ac78058737a3cf3c2b56897430684c15c616ac9fc7ee22854a96d6251a770e250421da9008db9fdd4818307a4e08c

  • SSDEEP

    98304:IxHuoJAeZBGyf5ezguZGJx7eShXOHQbAMkTB5WElE:KBGOIyfMkJlhzmLu

Score
7/10

Malware Config

Targets

    • Target

      5e2945c50e6cb69757288c41f62f8ee59da9a5c165a23f203f62d6fc03d5a22e

    • Size

      4.6MB

    • MD5

      4dc5c5b0fbed965ec98a7516c92f817e

    • SHA1

      9f7beb2fd95794b64de746bf9f1cca1bab7cb83b

    • SHA256

      5e2945c50e6cb69757288c41f62f8ee59da9a5c165a23f203f62d6fc03d5a22e

    • SHA512

      bc7728cef44aa25e4a274cc13c0f9edf836ac78058737a3cf3c2b56897430684c15c616ac9fc7ee22854a96d6251a770e250421da9008db9fdd4818307a4e08c

    • SSDEEP

      98304:IxHuoJAeZBGyf5ezguZGJx7eShXOHQbAMkTB5WElE:KBGOIyfMkJlhzmLu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks