General

  • Target

    728a604969bec79631d8e00e899dc86f648889bfbab07ac5692d7c2478df532a

  • Size

    4.6MB

  • Sample

    231126-av2j9sdg44

  • MD5

    fe306058cebb76614422b459f85beff8

  • SHA1

    0991442860ace3021c22144b382cc710bf500bd4

  • SHA256

    728a604969bec79631d8e00e899dc86f648889bfbab07ac5692d7c2478df532a

  • SHA512

    59c7fe237099883b763f33cb7c798516d5d4bd0a90b55196d26cbcbac87270085209723265ee79b3a7ee59fd479f2ad582cf3909982972d7f08c92b479751af3

  • SSDEEP

    98304:U5oCJriAVatRCRQuUBNCbnJUzcbgSYq+3wZ4MTwx3zXylE:pxYGJ6bnpsSn9TwBeu

Score
7/10

Malware Config

Targets

    • Target

      728a604969bec79631d8e00e899dc86f648889bfbab07ac5692d7c2478df532a

    • Size

      4.6MB

    • MD5

      fe306058cebb76614422b459f85beff8

    • SHA1

      0991442860ace3021c22144b382cc710bf500bd4

    • SHA256

      728a604969bec79631d8e00e899dc86f648889bfbab07ac5692d7c2478df532a

    • SHA512

      59c7fe237099883b763f33cb7c798516d5d4bd0a90b55196d26cbcbac87270085209723265ee79b3a7ee59fd479f2ad582cf3909982972d7f08c92b479751af3

    • SSDEEP

      98304:U5oCJriAVatRCRQuUBNCbnJUzcbgSYq+3wZ4MTwx3zXylE:pxYGJ6bnpsSn9TwBeu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks