General

  • Target

    3e0e8af67ebfa9811d83d696a4fff2d414f76df3cc75c26604ed5b4f7131c147

  • Size

    6.9MB

  • Sample

    231211-b3yzsahfen

  • MD5

    1e9f01b676440ff99f1141492b1acd7f

  • SHA1

    df4c65bd4346fe772827d04d90e661666846f42d

  • SHA256

    3e0e8af67ebfa9811d83d696a4fff2d414f76df3cc75c26604ed5b4f7131c147

  • SHA512

    4741f2b6097345e5bf0c805f19a5a33b77f5158c22ec02923ee0aa5bc4493a23c1ca8b1efb993593b1c63981de639e8aa9eb0e818e2954584d6008dc131895d4

  • SSDEEP

    98304:4+koiRLFdsODKUdFxQ8k618KzAYYC9z3Bbgtev25o40nsZJjNw5MQNiEU4P5EKHl:Jz25G6bV1yYDuZxCWQNhUU2uNzj

Score
7/10

Malware Config

Targets

    • Target

      3e0e8af67ebfa9811d83d696a4fff2d414f76df3cc75c26604ed5b4f7131c147

    • Size

      6.9MB

    • MD5

      1e9f01b676440ff99f1141492b1acd7f

    • SHA1

      df4c65bd4346fe772827d04d90e661666846f42d

    • SHA256

      3e0e8af67ebfa9811d83d696a4fff2d414f76df3cc75c26604ed5b4f7131c147

    • SHA512

      4741f2b6097345e5bf0c805f19a5a33b77f5158c22ec02923ee0aa5bc4493a23c1ca8b1efb993593b1c63981de639e8aa9eb0e818e2954584d6008dc131895d4

    • SSDEEP

      98304:4+koiRLFdsODKUdFxQ8k618KzAYYC9z3Bbgtev25o40nsZJjNw5MQNiEU4P5EKHl:Jz25G6bV1yYDuZxCWQNhUU2uNzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks