General

  • Target

    6b17628e119df7eea4b045d211fc13e99232d30d958a2b5f067531c449356ab3

  • Size

    4.6MB

  • Sample

    231125-x5nsgscg31

  • MD5

    01018b3902ee7816d2b9023d2b6822f6

  • SHA1

    8d0604f28b6accff4747724a89dc0fb92bef3b48

  • SHA256

    6b17628e119df7eea4b045d211fc13e99232d30d958a2b5f067531c449356ab3

  • SHA512

    d1ce17faca78d6650fa25c3b2cbc801e45e18819229636d5b9a2dfb049119d9bbe8205d6ec37700def0b04b9924b208fd03573f62cac02a6975d473ea45762da

  • SSDEEP

    98304:T5oCJriAVatRCRQuUBNCbnJUzcbgSYq+3wZ4MTwx3zXylE:8xYGJ6bnpsSn9TwBeu

Score
7/10

Malware Config

Targets

    • Target

      6b17628e119df7eea4b045d211fc13e99232d30d958a2b5f067531c449356ab3

    • Size

      4.6MB

    • MD5

      01018b3902ee7816d2b9023d2b6822f6

    • SHA1

      8d0604f28b6accff4747724a89dc0fb92bef3b48

    • SHA256

      6b17628e119df7eea4b045d211fc13e99232d30d958a2b5f067531c449356ab3

    • SHA512

      d1ce17faca78d6650fa25c3b2cbc801e45e18819229636d5b9a2dfb049119d9bbe8205d6ec37700def0b04b9924b208fd03573f62cac02a6975d473ea45762da

    • SSDEEP

      98304:T5oCJriAVatRCRQuUBNCbnJUzcbgSYq+3wZ4MTwx3zXylE:8xYGJ6bnpsSn9TwBeu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks