Overview

overview

7

Static

static

3

e6a8617df9...47.exe

windows7-x64

7

e6a8617df9...47.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    e6a8617df924cab673fd94d8a677783593adeadf92d75347d04f4a28e6d33247

  • Size

    2.5MB

  • Sample

    231127-gh7n3sef6w

  • MD5

    0905fda86ef83d5da98d85bb4c1e7334

  • SHA1

    a69bec48ded8860e0788c41a0815f33e05c4a49d

  • SHA256

    69861f4fe99400ac5104d28302d31466f1b1081f3dbba8688301acb7e6df676d

  • SHA512

    949e7fe72dc9550649e9cde775e010b5962bc6617ef7375e6afb70e258f6b8844cd74e2ce0576cf746bca78217a52c5b07a935acbd8e7a2c524e45f25794c6fc

  • SSDEEP

    49152:gMQEM4lXL9O+NPnFrXzEgkRlWQ8UyRi4j6fZ0uCU1qA++KJxYxNwbkDX:gMQOFL9zN/NXzEg8sUfW6fZ0FyctCX

Score
7/10
discovery

Malware Config

Targets

    • Target

      e6a8617df924cab673fd94d8a677783593adeadf92d75347d04f4a28e6d33247

    • Size

      2.5MB

    • MD5

      637574cc0e02e4dcc02c529040c2ac27

    • SHA1

      75d2c4f07874ff16794c813eef5ccce5065a59e7

    • SHA256

      e6a8617df924cab673fd94d8a677783593adeadf92d75347d04f4a28e6d33247

    • SHA512

      f983a41dbd02da7375e5bcb3cefde2e0e647a2dce3895771edb9d1e32e7367a69726b903f02c79535e55065b142ea40c1335a7235c305d538441ac07739035b3

    • SSDEEP

      49152:F2yAME4XX3hEQNvLc4dC1MFvQN2QrhCA4nYf30Co21GAaaq9xMFHQRY0E:gyAwn3hHNTcfdNhNoYf30vew7lE

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks