General

  • Target

    0316df9f74245d48d1c4546e15ac30ef6384eb0b7eeecf5ef70c0e2d4b79d610

  • Size

    6.9MB

  • Sample

    231210-xrmchabge9

  • MD5

    5c1c8d206b9dc8d04d44ff31182ed3f1

  • SHA1

    d2883fd41228cdc2f7f8344de8d0ca8fb860adfe

  • SHA256

    0316df9f74245d48d1c4546e15ac30ef6384eb0b7eeecf5ef70c0e2d4b79d610

  • SHA512

    aa997c7dc5e0409ed2556d9673630285e95c202c341801a324a95c7f0fab259dfc207ccf42875f99913ea6a26903b59edc68ee5a2dc57476217428196b59a883

  • SSDEEP

    196608:mA89BmaeXRdyXFnlUrU7o7Bz3HzNNn1jnNnTfMImG0zj:2BmakyVnlUQ7Wz3Tv1jNTh0zj

Score
7/10

Malware Config

Targets

    • Target

      0316df9f74245d48d1c4546e15ac30ef6384eb0b7eeecf5ef70c0e2d4b79d610

    • Size

      6.9MB

    • MD5

      5c1c8d206b9dc8d04d44ff31182ed3f1

    • SHA1

      d2883fd41228cdc2f7f8344de8d0ca8fb860adfe

    • SHA256

      0316df9f74245d48d1c4546e15ac30ef6384eb0b7eeecf5ef70c0e2d4b79d610

    • SHA512

      aa997c7dc5e0409ed2556d9673630285e95c202c341801a324a95c7f0fab259dfc207ccf42875f99913ea6a26903b59edc68ee5a2dc57476217428196b59a883

    • SSDEEP

      196608:mA89BmaeXRdyXFnlUrU7o7Bz3HzNNn1jnNnTfMImG0zj:2BmakyVnlUQ7Wz3Tv1jNTh0zj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks