General

  • Target

    5c3eb87ef63f91ede2af72c405e359e663da17c78bbe223712ad67ea1b0d1c60

  • Size

    4.6MB

  • Sample

    231126-cty4vsee25

  • MD5

    d8405743900e6a6f559d65db917df406

  • SHA1

    b3ecd24def75e2f4a098e61822f7d8051acef947

  • SHA256

    5c3eb87ef63f91ede2af72c405e359e663da17c78bbe223712ad67ea1b0d1c60

  • SHA512

    bedfa20d359524d84ddb0b4b81ac2f68b7a532824889ec5042097d3a4b52bea8a7bb28f60153948814d5377521f118f16358a42a10ca00a1940bc61cbc9d6870

  • SSDEEP

    98304:Q5oCJriAVatRCRQuUBNCbnJUzcbgSYq+3wZ4MTwx3zXylE:NxYGJ6bnpsSn9TwBeu

Score
7/10

Malware Config

Targets

    • Target

      5c3eb87ef63f91ede2af72c405e359e663da17c78bbe223712ad67ea1b0d1c60

    • Size

      4.6MB

    • MD5

      d8405743900e6a6f559d65db917df406

    • SHA1

      b3ecd24def75e2f4a098e61822f7d8051acef947

    • SHA256

      5c3eb87ef63f91ede2af72c405e359e663da17c78bbe223712ad67ea1b0d1c60

    • SHA512

      bedfa20d359524d84ddb0b4b81ac2f68b7a532824889ec5042097d3a4b52bea8a7bb28f60153948814d5377521f118f16358a42a10ca00a1940bc61cbc9d6870

    • SSDEEP

      98304:Q5oCJriAVatRCRQuUBNCbnJUzcbgSYq+3wZ4MTwx3zXylE:NxYGJ6bnpsSn9TwBeu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks