General

  • Target

    428e92efb6c88cde9fa094225f5aa6e2c02a99554be71ddae4ae91ca921e25e3

  • Size

    3.3MB

  • Sample

    231127-yxdszscf85

  • MD5

    824c4980b6f12ed3b6c85d5e4954e23b

  • SHA1

    1097b9899bbea7eba5ba43705fb55612dae41ba8

  • SHA256

    428e92efb6c88cde9fa094225f5aa6e2c02a99554be71ddae4ae91ca921e25e3

  • SHA512

    3c418c666cbd2b98d0b2203b6599fa7a38b699563a18b86c5f7e788d68c4cd26c8b7e4fb90cf46fb87a0f87b7f65a11fde42a8bf211a0ddf938346c9fd7a0a84

  • SSDEEP

    98304:TGgdaNnnnRVNmjfJW4N66Lyq/jU/ON6SXFIAlE:1dKnPoW4NHLV/j+ON5XFIAu

Score
7/10

Malware Config

Targets

    • Target

      428e92efb6c88cde9fa094225f5aa6e2c02a99554be71ddae4ae91ca921e25e3

    • Size

      3.3MB

    • MD5

      824c4980b6f12ed3b6c85d5e4954e23b

    • SHA1

      1097b9899bbea7eba5ba43705fb55612dae41ba8

    • SHA256

      428e92efb6c88cde9fa094225f5aa6e2c02a99554be71ddae4ae91ca921e25e3

    • SHA512

      3c418c666cbd2b98d0b2203b6599fa7a38b699563a18b86c5f7e788d68c4cd26c8b7e4fb90cf46fb87a0f87b7f65a11fde42a8bf211a0ddf938346c9fd7a0a84

    • SSDEEP

      98304:TGgdaNnnnRVNmjfJW4N66Lyq/jU/ON6SXFIAlE:1dKnPoW4NHLV/j+ON5XFIAu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks