General

  • Target

    da651396c740d3407a735c22ef077b8f56796013b853a50e2aa73b469338acac

  • Size

    4.6MB

  • Sample

    231125-y6h43acf44

  • MD5

    dc32f42c6b83e02882a9455e069fc677

  • SHA1

    c33675bf7c955b6960a408d8339bb4ac37ba7d46

  • SHA256

    da651396c740d3407a735c22ef077b8f56796013b853a50e2aa73b469338acac

  • SHA512

    b666cc525c006b8953dcecb861198adf4300c6659fd53aece0aff2800edb56febfa28981c7ec40aa00c714c337c0b460fd7265c99c01682dfe6ba6b392005b9f

  • SSDEEP

    98304:H5oCJriAVatRCRQuUBNCbnJUzcbgSYq+3wZ4MTwx3zXylE:YxYGJ6bnpsSn9TwBeu

Score
7/10

Malware Config

Targets

    • Target

      da651396c740d3407a735c22ef077b8f56796013b853a50e2aa73b469338acac

    • Size

      4.6MB

    • MD5

      dc32f42c6b83e02882a9455e069fc677

    • SHA1

      c33675bf7c955b6960a408d8339bb4ac37ba7d46

    • SHA256

      da651396c740d3407a735c22ef077b8f56796013b853a50e2aa73b469338acac

    • SHA512

      b666cc525c006b8953dcecb861198adf4300c6659fd53aece0aff2800edb56febfa28981c7ec40aa00c714c337c0b460fd7265c99c01682dfe6ba6b392005b9f

    • SSDEEP

      98304:H5oCJriAVatRCRQuUBNCbnJUzcbgSYq+3wZ4MTwx3zXylE:YxYGJ6bnpsSn9TwBeu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks