General

  • Target

    d1ec144ea5d2fe662f0db1507fb1c9b1f97f50d2c19e3e265a0c3ad41c72e6e7

  • Size

    6.9MB

  • Sample

    231211-bygvpsheel

  • MD5

    f9fdd23a29569cec4014f6f37fd13786

  • SHA1

    ffb4acbdc894371f5f33190fa3a1f7f6ef050c5b

  • SHA256

    d1ec144ea5d2fe662f0db1507fb1c9b1f97f50d2c19e3e265a0c3ad41c72e6e7

  • SHA512

    dba1b599d0e0d0fa1e2515a2397b877fb4f7cf13c4a05da5be5f18477166024d250b96508b8410bec730965eb8c5b5171351b6cb2a45679e1add9a436c159a10

  • SSDEEP

    196608:qxnTNzjsOzc7TGHscDgcXbIdslX38dgFYJzj:SNztzQlcDPXus98d9Jzj

Score
7/10

Malware Config

Targets

    • Target

      d1ec144ea5d2fe662f0db1507fb1c9b1f97f50d2c19e3e265a0c3ad41c72e6e7

    • Size

      6.9MB

    • MD5

      f9fdd23a29569cec4014f6f37fd13786

    • SHA1

      ffb4acbdc894371f5f33190fa3a1f7f6ef050c5b

    • SHA256

      d1ec144ea5d2fe662f0db1507fb1c9b1f97f50d2c19e3e265a0c3ad41c72e6e7

    • SHA512

      dba1b599d0e0d0fa1e2515a2397b877fb4f7cf13c4a05da5be5f18477166024d250b96508b8410bec730965eb8c5b5171351b6cb2a45679e1add9a436c159a10

    • SSDEEP

      196608:qxnTNzjsOzc7TGHscDgcXbIdslX38dgFYJzj:SNztzQlcDPXus98d9Jzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks