General

  • Target

    5f5025395a235ca5dabe8362f139d73261f96c60eafcab96dfe21b6991100ab5

  • Size

    3.3MB

  • Sample

    231127-3ezpysdg2t

  • MD5

    9bf544ff50154d9a8e717349d0989030

  • SHA1

    13537ec6978361600c8b7b21d49a071787ce6497

  • SHA256

    5f5025395a235ca5dabe8362f139d73261f96c60eafcab96dfe21b6991100ab5

  • SHA512

    7ac7a745fc1e534198d536af51519232096a157c3e80e3c8bcad36ec53a21385190c3f7a771065a46a26f33144cabc4477a032d0b93402cf67218dc53cd828dc

  • SSDEEP

    98304:LGgdaNnnnRVNmjfJW4N66Lyq/jU/ON6SXFIAlE:tdKnPoW4NHLV/j+ON5XFIAu

Score
7/10

Malware Config

Targets

    • Target

      5f5025395a235ca5dabe8362f139d73261f96c60eafcab96dfe21b6991100ab5

    • Size

      3.3MB

    • MD5

      9bf544ff50154d9a8e717349d0989030

    • SHA1

      13537ec6978361600c8b7b21d49a071787ce6497

    • SHA256

      5f5025395a235ca5dabe8362f139d73261f96c60eafcab96dfe21b6991100ab5

    • SHA512

      7ac7a745fc1e534198d536af51519232096a157c3e80e3c8bcad36ec53a21385190c3f7a771065a46a26f33144cabc4477a032d0b93402cf67218dc53cd828dc

    • SSDEEP

      98304:LGgdaNnnnRVNmjfJW4N66Lyq/jU/ON6SXFIAlE:tdKnPoW4NHLV/j+ON5XFIAu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks