General

  • Target

    2b51cf4f9102b08dee9749b09124615e58e0111c22ec38f0657874a779a80e9d

  • Size

    2.8MB

  • Sample

    231127-af8d9sdb8y

  • MD5

    3a87f72cdc401e5f8ab88be75023189e

  • SHA1

    ebde28187a62c72da045ad0463ed3ec85660c459

  • SHA256

    2b51cf4f9102b08dee9749b09124615e58e0111c22ec38f0657874a779a80e9d

  • SHA512

    fc1adcdba9f058cf7f14841e644ed310aa39e19ab06ee01e9edc48245a9bb99b0f80d8d88bdba869b339d36f5bd26e4788e2a40d73f12ae9b0d8a1ed170d637b

  • SSDEEP

    49152:J2n/u3ewuQtHimJjOKulEX3D1ySEFa7gORShW3K7x91p20xUYxxb/h8ZoRY0E:cn8tDJjOjsDjUhW3KN9W4Hxxb/h7lE

Score
7/10

Malware Config

Targets

    • Target

      2b51cf4f9102b08dee9749b09124615e58e0111c22ec38f0657874a779a80e9d

    • Size

      2.8MB

    • MD5

      3a87f72cdc401e5f8ab88be75023189e

    • SHA1

      ebde28187a62c72da045ad0463ed3ec85660c459

    • SHA256

      2b51cf4f9102b08dee9749b09124615e58e0111c22ec38f0657874a779a80e9d

    • SHA512

      fc1adcdba9f058cf7f14841e644ed310aa39e19ab06ee01e9edc48245a9bb99b0f80d8d88bdba869b339d36f5bd26e4788e2a40d73f12ae9b0d8a1ed170d637b

    • SSDEEP

      49152:J2n/u3ewuQtHimJjOKulEX3D1ySEFa7gORShW3K7x91p20xUYxxb/h8ZoRY0E:cn8tDJjOjsDjUhW3KN9W4Hxxb/h7lE

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks