General

  • Target

    63c437d2b2ed64c51a81fb619c64e5200881a34ab0b61e4013a9cd44584f432a

  • Size

    6.9MB

  • Sample

    231210-wl692sage7

  • MD5

    063d11c38fc6d5d7f27278c84a15892e

  • SHA1

    1c5337ee74db2f85d17a42109e37bc71d2f54a53

  • SHA256

    63c437d2b2ed64c51a81fb619c64e5200881a34ab0b61e4013a9cd44584f432a

  • SHA512

    0af790c561a25b51725830b50a30bea874b0ecc105c65d54493d73535a5b9948880b6566174d236d6ba20c2a83e2515a2ed2c0eb3f479963529e7939317c9ac1

  • SSDEEP

    196608:3xnTNzjsOzc7TGHscDgcXbIdslX38dgFYJzj:NNztzQlcDPXus98d9Jzj

Score
7/10

Malware Config

Targets

    • Target

      63c437d2b2ed64c51a81fb619c64e5200881a34ab0b61e4013a9cd44584f432a

    • Size

      6.9MB

    • MD5

      063d11c38fc6d5d7f27278c84a15892e

    • SHA1

      1c5337ee74db2f85d17a42109e37bc71d2f54a53

    • SHA256

      63c437d2b2ed64c51a81fb619c64e5200881a34ab0b61e4013a9cd44584f432a

    • SHA512

      0af790c561a25b51725830b50a30bea874b0ecc105c65d54493d73535a5b9948880b6566174d236d6ba20c2a83e2515a2ed2c0eb3f479963529e7939317c9ac1

    • SSDEEP

      196608:3xnTNzjsOzc7TGHscDgcXbIdslX38dgFYJzj:NNztzQlcDPXus98d9Jzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks