General

  • Target

    ab706e232f17d54fc9b15dd26b3e22b1033232860f89527e01df0a11cb655179

  • Size

    3.3MB

  • Sample

    231128-ebwxwsfb2z

  • MD5

    52a99ef69ea9097779739566c790f448

  • SHA1

    0e252d94bd9d7757ade9949bfa39f08355921afc

  • SHA256

    ab706e232f17d54fc9b15dd26b3e22b1033232860f89527e01df0a11cb655179

  • SHA512

    fab2753b19b188f98cd9290e14fa87f0fe05f683f169291c153f6699bc4ac0cad139a7b47994904e21361b3fa0ef50c7c78028186016086164a46a010221308e

  • SSDEEP

    98304:jGgdaNnnnRVNmjfJW4N66Lyq/jU/ON6SXFIAlE:ldKnPoW4NHLV/j+ON5XFIAu

Score
7/10

Malware Config

Targets

    • Target

      ab706e232f17d54fc9b15dd26b3e22b1033232860f89527e01df0a11cb655179

    • Size

      3.3MB

    • MD5

      52a99ef69ea9097779739566c790f448

    • SHA1

      0e252d94bd9d7757ade9949bfa39f08355921afc

    • SHA256

      ab706e232f17d54fc9b15dd26b3e22b1033232860f89527e01df0a11cb655179

    • SHA512

      fab2753b19b188f98cd9290e14fa87f0fe05f683f169291c153f6699bc4ac0cad139a7b47994904e21361b3fa0ef50c7c78028186016086164a46a010221308e

    • SSDEEP

      98304:jGgdaNnnnRVNmjfJW4N66Lyq/jU/ON6SXFIAlE:ldKnPoW4NHLV/j+ON5XFIAu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks