Overview

overview

7

Static

static

3

ad7b2aee48...3d.exe

windows7-x64

7

ad7b2aee48...3d.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ad7b2aee48ccf446714695cfb6d3f7d4989fd29be4ef8a2dac929cac6145713d

  • Size

    4.5MB

  • Sample

    231126-akvc7sea2z

  • MD5

    b9c00eff5185620300290d0ada69e89e

  • SHA1

    bf33574f438a5673c9f4c66068ba281b1846da97

  • SHA256

    6dc215a496cd37c914d4baee3fb647cb8d9016c05825bdd14a7dcac8da95486e

  • SHA512

    445d1752894a4d7affa1b548fc20d032cfd0a000471cd5e440747085a15237d3794e1f166380685f38251457e8bc02f5e31b118a061021849c71761ccb720b81

  • SSDEEP

    98304:vIw2y3S/Tc8dxJAklSLsKk/P68kt7JgzfRCEAoNGgpdh6FYWzYmtO+:gi3gc8ZlP6pZsDGkmrzYmtd

Score
7/10
discovery

Malware Config

Targets

    • Target

      ad7b2aee48ccf446714695cfb6d3f7d4989fd29be4ef8a2dac929cac6145713d

    • Size

      4.6MB

    • MD5

      114a4a61aa7415446c5ae172a1c4d4e0

    • SHA1

      e71b9524385f5d4d2ef582ac62971d31eac98b28

    • SHA256

      ad7b2aee48ccf446714695cfb6d3f7d4989fd29be4ef8a2dac929cac6145713d

    • SHA512

      877259b272aa73b4416340d9a30eedfb88b35a84534c1e4ec0f45f4478d8893c9aff648670e32f26f8b9f431196a1e65571bf9e4ff290fedac6da1d2c7b474b8

    • SSDEEP

      98304:oFYS2yjOk4AXOAyrSj8Ke/PKkc97bgJnRCsAWNsAfdV8Tg6zQgFlE:ngjCA67PKhpmFsi2BzQgFu

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks