General

  • Target

    a153e67254a0e8d5e8a822339b1e30cdc07655a0fbb6e1d7e4280e5e3e619e7e

  • Size

    6.9MB

  • Sample

    231211-b5w8zahgar

  • MD5

    7d4b6cdcc20b940fe2e52ea3365a88a5

  • SHA1

    1b68c5c95a50447f994db31e9425387a5e9588d8

  • SHA256

    a153e67254a0e8d5e8a822339b1e30cdc07655a0fbb6e1d7e4280e5e3e619e7e

  • SHA512

    6c99f50ba9740750b04835961dba3699f41e5eb786bd94a7443265fed7725e8d60e4ffe252ee6b60e1fc6321bb244a50bfe9d1d07071b15de11d58b2a4590ea8

  • SSDEEP

    196608:fxnTNzjsOzc7TGHscDgcXbIdslX38dgFYJzj:lNztzQlcDPXus98d9Jzj

Score
7/10

Malware Config

Targets

    • Target

      a153e67254a0e8d5e8a822339b1e30cdc07655a0fbb6e1d7e4280e5e3e619e7e

    • Size

      6.9MB

    • MD5

      7d4b6cdcc20b940fe2e52ea3365a88a5

    • SHA1

      1b68c5c95a50447f994db31e9425387a5e9588d8

    • SHA256

      a153e67254a0e8d5e8a822339b1e30cdc07655a0fbb6e1d7e4280e5e3e619e7e

    • SHA512

      6c99f50ba9740750b04835961dba3699f41e5eb786bd94a7443265fed7725e8d60e4ffe252ee6b60e1fc6321bb244a50bfe9d1d07071b15de11d58b2a4590ea8

    • SSDEEP

      196608:fxnTNzjsOzc7TGHscDgcXbIdslX38dgFYJzj:lNztzQlcDPXus98d9Jzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks