General

  • Target

    a5a3b3e088b8d2f552b81c5c709dfcc11c0a74a83bab6a6f4f53f351f27a6eb7

  • Size

    6.9MB

  • Sample

    231210-1ts5lsefb8

  • MD5

    274c9e7cd431a1c2764b08ad38dcce31

  • SHA1

    f1d1c219574dde38f8bade60a526fee95536dbf5

  • SHA256

    a5a3b3e088b8d2f552b81c5c709dfcc11c0a74a83bab6a6f4f53f351f27a6eb7

  • SHA512

    4c5afaeebf6ac7dc5dd7a446e7fe213fe3f2a8baa16ab47032470e3d1ba978f15f81b5efacd9f964306800dbc8a3ddab9a07016db22d9a9f1d348b1b8663f580

  • SSDEEP

    98304:3+koiRLFdsODKUdFxQ8k618KzAYYC9z3Bbgtev25o40nsZJjNw5MQNiEU4P5EKHl:uz25G6bV1yYDuZxCWQNhUU2uNzj

Score
7/10

Malware Config

Targets

    • Target

      a5a3b3e088b8d2f552b81c5c709dfcc11c0a74a83bab6a6f4f53f351f27a6eb7

    • Size

      6.9MB

    • MD5

      274c9e7cd431a1c2764b08ad38dcce31

    • SHA1

      f1d1c219574dde38f8bade60a526fee95536dbf5

    • SHA256

      a5a3b3e088b8d2f552b81c5c709dfcc11c0a74a83bab6a6f4f53f351f27a6eb7

    • SHA512

      4c5afaeebf6ac7dc5dd7a446e7fe213fe3f2a8baa16ab47032470e3d1ba978f15f81b5efacd9f964306800dbc8a3ddab9a07016db22d9a9f1d348b1b8663f580

    • SSDEEP

      98304:3+koiRLFdsODKUdFxQ8k618KzAYYC9z3Bbgtev25o40nsZJjNw5MQNiEU4P5EKHl:uz25G6bV1yYDuZxCWQNhUU2uNzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks