General

  • Target

    79d9fd0fdaf6237aa0d7fadd42c04acec9bb9c0a8ba3641c9bbf80032916136a

  • Size

    3.3MB

  • Sample

    231127-xrchascb7s

  • MD5

    0f77edb81c2e70fe2c939b322d952211

  • SHA1

    ce13d8660f0ff8afe4e587b2e23c935f3c06dfd4

  • SHA256

    79d9fd0fdaf6237aa0d7fadd42c04acec9bb9c0a8ba3641c9bbf80032916136a

  • SHA512

    a76aaed0240a825d22bf904f1eee9ad582eeba5a64eead26616c5c859753e2ba0237b64748ce43e3a149112c51e6ada462f552b62516283528379fda305d08b9

  • SSDEEP

    98304:XGgdaNnnnRVNmjfJW4N66Lyq/jU/ON6SXFIAlE:BdKnPoW4NHLV/j+ON5XFIAu

Score
7/10

Malware Config

Targets

    • Target

      79d9fd0fdaf6237aa0d7fadd42c04acec9bb9c0a8ba3641c9bbf80032916136a

    • Size

      3.3MB

    • MD5

      0f77edb81c2e70fe2c939b322d952211

    • SHA1

      ce13d8660f0ff8afe4e587b2e23c935f3c06dfd4

    • SHA256

      79d9fd0fdaf6237aa0d7fadd42c04acec9bb9c0a8ba3641c9bbf80032916136a

    • SHA512

      a76aaed0240a825d22bf904f1eee9ad582eeba5a64eead26616c5c859753e2ba0237b64748ce43e3a149112c51e6ada462f552b62516283528379fda305d08b9

    • SSDEEP

      98304:XGgdaNnnnRVNmjfJW4N66Lyq/jU/ON6SXFIAlE:BdKnPoW4NHLV/j+ON5XFIAu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks