General

  • Target

    ae64b2ea81422549deb20b0a8a8276d59bb74d809913e69fb3bb2c040d102025

  • Size

    2.5MB

  • Sample

    231126-ncawgsha43

  • MD5

    6313fb4dd7eff34cf19de052163cd728

  • SHA1

    a1f638e4a191efe1688ae0bdbbad91a5d442e83b

  • SHA256

    ae64b2ea81422549deb20b0a8a8276d59bb74d809913e69fb3bb2c040d102025

  • SHA512

    012290928d071729f2afd26e6c2fffacf582769a9a7741addcbb18e9112b8658cea76a4686aaa6e14187fab380be15e074fbac6137ff7d2124a57081cafc28fb

  • SSDEEP

    49152:W2yAME4XX3hEQNvLc4dC1MFvQN2QrhCA4nYf30Co21GAaaq9xMFHQRY0E:vyAwn3hHNTcfdNhNoYf30vew7lE

Score
7/10

Malware Config

Targets

    • Target

      ae64b2ea81422549deb20b0a8a8276d59bb74d809913e69fb3bb2c040d102025

    • Size

      2.5MB

    • MD5

      6313fb4dd7eff34cf19de052163cd728

    • SHA1

      a1f638e4a191efe1688ae0bdbbad91a5d442e83b

    • SHA256

      ae64b2ea81422549deb20b0a8a8276d59bb74d809913e69fb3bb2c040d102025

    • SHA512

      012290928d071729f2afd26e6c2fffacf582769a9a7741addcbb18e9112b8658cea76a4686aaa6e14187fab380be15e074fbac6137ff7d2124a57081cafc28fb

    • SSDEEP

      49152:W2yAME4XX3hEQNvLc4dC1MFvQN2QrhCA4nYf30Co21GAaaq9xMFHQRY0E:vyAwn3hHNTcfdNhNoYf30vew7lE

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks