General

  • Target

    SecuriteInfo.com.Win32.Malware-gen.23897.23815.exe

  • Size

    6.9MB

  • Sample

    231211-brag2saeh4

  • MD5

    47ef5687fcadc24c6cb4803b3d2b6d85

  • SHA1

    aa02ff0e47b95a1152c450345743b6c545599fd0

  • SHA256

    8651b1e853cf12571f33e94f373255f8f3c45ad7c986ea51b0531d6a9e146d89

  • SHA512

    5561ee06ed532b31845b58842cc7cdba6c3b3f9c7db7700113866dce83336feda1c36f2262a5a3726aff66c6e60d048b72ba851b02f7fac877eb63412539507f

  • SSDEEP

    196608:DSnj/mmV+GsH+bNueuJRAZVAOk5Vvz+tqE9AmEkzj:DSjumV+jHUodIjk5VzfE9Awzj

Score
7/10

Malware Config

Targets

    • Target

      SecuriteInfo.com.Win32.Malware-gen.23897.23815.exe

    • Size

      6.9MB

    • MD5

      47ef5687fcadc24c6cb4803b3d2b6d85

    • SHA1

      aa02ff0e47b95a1152c450345743b6c545599fd0

    • SHA256

      8651b1e853cf12571f33e94f373255f8f3c45ad7c986ea51b0531d6a9e146d89

    • SHA512

      5561ee06ed532b31845b58842cc7cdba6c3b3f9c7db7700113866dce83336feda1c36f2262a5a3726aff66c6e60d048b72ba851b02f7fac877eb63412539507f

    • SSDEEP

      196608:DSnj/mmV+GsH+bNueuJRAZVAOk5Vvz+tqE9AmEkzj:DSjumV+jHUodIjk5VzfE9Awzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks