General

  • Target

    e9cafed06f0f591cbfd066ba670fb480183d1d879efccc4e8ee81b8bb28c991a

  • Size

    3.4MB

  • Sample

    231128-c3qh3sef8v

  • MD5

    b5a48a3748c209b29d22526e5708a437

  • SHA1

    d9ebf9ec6dbc89f862024ba9b68808c22020ee77

  • SHA256

    e9cafed06f0f591cbfd066ba670fb480183d1d879efccc4e8ee81b8bb28c991a

  • SHA512

    13d62aee9369c844c79d92584e75506c2da6e74d2117b1ce4ea8228f0f1f2123875198b6ac0c48b45eac700785437ec1dead0277cc29f18d44c9f447b487fc43

  • SSDEEP

    98304:S7HRotVmAxdRMVqTfA6+ZIm9wOlMpLflE:/t1dRcqrAplSru

Score
7/10

Malware Config

Targets

    • Target

      e9cafed06f0f591cbfd066ba670fb480183d1d879efccc4e8ee81b8bb28c991a

    • Size

      3.4MB

    • MD5

      b5a48a3748c209b29d22526e5708a437

    • SHA1

      d9ebf9ec6dbc89f862024ba9b68808c22020ee77

    • SHA256

      e9cafed06f0f591cbfd066ba670fb480183d1d879efccc4e8ee81b8bb28c991a

    • SHA512

      13d62aee9369c844c79d92584e75506c2da6e74d2117b1ce4ea8228f0f1f2123875198b6ac0c48b45eac700785437ec1dead0277cc29f18d44c9f447b487fc43

    • SSDEEP

      98304:S7HRotVmAxdRMVqTfA6+ZIm9wOlMpLflE:/t1dRcqrAplSru

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks