General

  • Target

    c4da2d1d38fd3cdfd341ef2d0c183db629358f8d08be5b0ad1362adf5f8b191b

  • Size

    2.8MB

  • Sample

    231127-jv8s1sfb51

  • MD5

    67909913d5f64e438a75e5462a805ecf

  • SHA1

    07d0e23e7579d15867e4aa17c47264ba9fde5cbb

  • SHA256

    c4da2d1d38fd3cdfd341ef2d0c183db629358f8d08be5b0ad1362adf5f8b191b

  • SHA512

    1841ca0717e8f1e7792925fcfd3d865fc94e736713431f728b18f25b0283bdc189c395917f711b877f44de0a3a9b2c65f36dc421e48b537a11f9171a796504ba

  • SSDEEP

    49152:p2n/u3ewuQtHimJjOKulEX3D1ySEFa7gORShW3K7x91p20xUYxxb/h8ZoRY0E:8n8tDJjOjsDjUhW3KN9W4Hxxb/h7lE

Score
7/10

Malware Config

Targets

    • Target

      c4da2d1d38fd3cdfd341ef2d0c183db629358f8d08be5b0ad1362adf5f8b191b

    • Size

      2.8MB

    • MD5

      67909913d5f64e438a75e5462a805ecf

    • SHA1

      07d0e23e7579d15867e4aa17c47264ba9fde5cbb

    • SHA256

      c4da2d1d38fd3cdfd341ef2d0c183db629358f8d08be5b0ad1362adf5f8b191b

    • SHA512

      1841ca0717e8f1e7792925fcfd3d865fc94e736713431f728b18f25b0283bdc189c395917f711b877f44de0a3a9b2c65f36dc421e48b537a11f9171a796504ba

    • SSDEEP

      49152:p2n/u3ewuQtHimJjOKulEX3D1ySEFa7gORShW3K7x91p20xUYxxb/h8ZoRY0E:8n8tDJjOjsDjUhW3KN9W4Hxxb/h7lE

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks