General

  • Target

    b171b8c38652f7966e4f2ad3c4b93777fcf7ca515eadcccc54a67b6e218de55d

  • Size

    3.3MB

  • Sample

    231128-j1lknsge2x

  • MD5

    21b8d80cafcd5c29c54d7aaac4fdf7e2

  • SHA1

    eb9d5d1d607566efb248185e7739268444f20a67

  • SHA256

    b171b8c38652f7966e4f2ad3c4b93777fcf7ca515eadcccc54a67b6e218de55d

  • SHA512

    62780a0408ddea3858e87264ccaea89393c29f19717acd85212a651669073c5bf24fcc1a249562384831cfa7a409ab96a092f76bbe7833b77c925ebed34ea799

  • SSDEEP

    98304:HsOoX6Vy6JPvMmZQb8Lny4UqjRynQzKkxbH6dlE:qX6o/mZcAy4Xj+Gfwdu

Score
7/10

Malware Config

Targets

    • Target

      b171b8c38652f7966e4f2ad3c4b93777fcf7ca515eadcccc54a67b6e218de55d

    • Size

      3.3MB

    • MD5

      21b8d80cafcd5c29c54d7aaac4fdf7e2

    • SHA1

      eb9d5d1d607566efb248185e7739268444f20a67

    • SHA256

      b171b8c38652f7966e4f2ad3c4b93777fcf7ca515eadcccc54a67b6e218de55d

    • SHA512

      62780a0408ddea3858e87264ccaea89393c29f19717acd85212a651669073c5bf24fcc1a249562384831cfa7a409ab96a092f76bbe7833b77c925ebed34ea799

    • SSDEEP

      98304:HsOoX6Vy6JPvMmZQb8Lny4UqjRynQzKkxbH6dlE:qX6o/mZcAy4Xj+Gfwdu

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks