General

  • Target

    bf98696145eab7b6f9f3b39f062b21cc0c5b633bab8aeebc795e24e4cf0159e0

  • Size

    4.6MB

  • Sample

    231125-xekyxace5t

  • MD5

    4ad8304e285693b068a2934681b3e605

  • SHA1

    cb8cd562ee34bcb6096822221538098d8ace11e9

  • SHA256

    bf98696145eab7b6f9f3b39f062b21cc0c5b633bab8aeebc795e24e4cf0159e0

  • SHA512

    302a413c4f5d9d1bd86d3160178ee46db55590af9d4369d3a481279a4d887450fd063b228d5666c8de775a8a00dfc24ffc5226503992c827e7106ec1f7c22a4b

  • SSDEEP

    98304:I5oCJriAVatRCRQuUBNCbnJUzcbgSYq+3wZ4MTwx3zXylE:FxYGJ6bnpsSn9TwBeu

Score
7/10

Malware Config

Targets

    • Target

      bf98696145eab7b6f9f3b39f062b21cc0c5b633bab8aeebc795e24e4cf0159e0

    • Size

      4.6MB

    • MD5

      4ad8304e285693b068a2934681b3e605

    • SHA1

      cb8cd562ee34bcb6096822221538098d8ace11e9

    • SHA256

      bf98696145eab7b6f9f3b39f062b21cc0c5b633bab8aeebc795e24e4cf0159e0

    • SHA512

      302a413c4f5d9d1bd86d3160178ee46db55590af9d4369d3a481279a4d887450fd063b228d5666c8de775a8a00dfc24ffc5226503992c827e7106ec1f7c22a4b

    • SSDEEP

      98304:I5oCJriAVatRCRQuUBNCbnJUzcbgSYq+3wZ4MTwx3zXylE:FxYGJ6bnpsSn9TwBeu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks