General

  • Target

    40aeaaf5effc8d20a8aef93df126fa127a96f5f16656c1086e1177238ddde086

  • Size

    2.5MB

  • Sample

    231126-p7drashd32

  • MD5

    d61b9d841dcb9c152147673bfc2bb948

  • SHA1

    8bb2908d3522bf9e22f58f7003723bb238ccc3ab

  • SHA256

    40aeaaf5effc8d20a8aef93df126fa127a96f5f16656c1086e1177238ddde086

  • SHA512

    70c30cc0071819c42575b0fe28e01771f3d78491adb8d0e2b2d946b1787357df3c924fcb27cc54ff444fb1664e8d065d8c4754e5a2d7e98e59c3676fd9592674

  • SSDEEP

    49152:d2bERBctaqluW8thU0kW2LTxMlR6bJl7Z/EqFtP9E5gWwXo4MLVH4RY0E:IO0lqtWJZMlkJlNdVE5nwCVYlE

Score
7/10

Malware Config

Targets

    • Target

      40aeaaf5effc8d20a8aef93df126fa127a96f5f16656c1086e1177238ddde086

    • Size

      2.5MB

    • MD5

      d61b9d841dcb9c152147673bfc2bb948

    • SHA1

      8bb2908d3522bf9e22f58f7003723bb238ccc3ab

    • SHA256

      40aeaaf5effc8d20a8aef93df126fa127a96f5f16656c1086e1177238ddde086

    • SHA512

      70c30cc0071819c42575b0fe28e01771f3d78491adb8d0e2b2d946b1787357df3c924fcb27cc54ff444fb1664e8d065d8c4754e5a2d7e98e59c3676fd9592674

    • SSDEEP

      49152:d2bERBctaqluW8thU0kW2LTxMlR6bJl7Z/EqFtP9E5gWwXo4MLVH4RY0E:IO0lqtWJZMlkJlNdVE5nwCVYlE

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks