General

  • Target

    7593145017111366d2b31354674ff03979c5203f29f18ea891fc49807d08d7b4

  • Size

    3.3MB

  • Sample

    231127-wyq4labd78

  • MD5

    ed31ae6327bfc0dc354eb37372f7d645

  • SHA1

    9cf7a953f5d665f14270bb23a3349dab400eba6a

  • SHA256

    7593145017111366d2b31354674ff03979c5203f29f18ea891fc49807d08d7b4

  • SHA512

    779f7dc6693752aa6dda6ac49f7cc8a6671a5667bf02497e7d3c2ba464d24572ad6b04ef529aab80a798cbd5981bbc2ffb8d7831191738ba0f5181d16d330821

  • SSDEEP

    98304:PGgdaNnnnRVNmjfJW4N66Lyq/jU/ON6SXFIAlE:ZdKnPoW4NHLV/j+ON5XFIAu

Score
7/10

Malware Config

Targets

    • Target

      7593145017111366d2b31354674ff03979c5203f29f18ea891fc49807d08d7b4

    • Size

      3.3MB

    • MD5

      ed31ae6327bfc0dc354eb37372f7d645

    • SHA1

      9cf7a953f5d665f14270bb23a3349dab400eba6a

    • SHA256

      7593145017111366d2b31354674ff03979c5203f29f18ea891fc49807d08d7b4

    • SHA512

      779f7dc6693752aa6dda6ac49f7cc8a6671a5667bf02497e7d3c2ba464d24572ad6b04ef529aab80a798cbd5981bbc2ffb8d7831191738ba0f5181d16d330821

    • SSDEEP

      98304:PGgdaNnnnRVNmjfJW4N66Lyq/jU/ON6SXFIAlE:ZdKnPoW4NHLV/j+ON5XFIAu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks