Overview

overview

7

Static

static

3

1432fc99d7...65.exe

windows7-x64

7

1432fc99d7...65.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1432fc99d73f32c7614d400318f1895d1c0e89f03c2a79fbb070b722c7e9e565

  • Size

    2.7MB

  • Sample

    231127-bntrhsde45

  • MD5

    265ff2aa5c8a24f50101dc176ca2e87e

  • SHA1

    6d35337083785da9cac8df7c1326ecca8c995243

  • SHA256

    67c1203a83f9e57d4b7ae3d2de74aa1c52d56240dc1f720fafcadd1a0e0a9a7a

  • SHA512

    e4593c6f3d0fd9d4f12ff4ca014ffdbf777740da3827920bd892e6e961f34f606c2d9920fe94b66668c407666ffd6b7d901b25798e712adf70f2d0d48f4bcaf4

  • SSDEEP

    49152:io6yX0cLjKyDMfa07N6vn8F/SJj5JtU9Z0bL6NDIAveK6dLCZ9ROAvR0R2+0475/:i60cLjBDWh/WXeNrm1IOAvR0R2IpLj

Score
7/10
discovery

Malware Config

Targets

    • Target

      1432fc99d73f32c7614d400318f1895d1c0e89f03c2a79fbb070b722c7e9e565

    • Size

      2.7MB

    • MD5

      3c42258cf197baf7b6a365e3bac2a673

    • SHA1

      610821b07a984e44c0cfe2bc55fa8bf42d169db6

    • SHA256

      1432fc99d73f32c7614d400318f1895d1c0e89f03c2a79fbb070b722c7e9e565

    • SHA512

      e12c7010c564ad274af090f26ffad3350296e68c13153ba43e35e8075013184fc2a4394c7a1fdc211beb7d308f8757e5340418dd86cc98257db4d2383dacfe4f

    • SSDEEP

      49152:P21yF0cd1E2n6faeHD6tn+VloJh5JtUt30blsBDI2t4OojvCH9zEAnR0R+S0WD5A:O60cd1Pnknl8X6BzKJgEAnR0R+0TlE

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks