General

  • Target

    SecuriteInfo.com.Trojan.Siggen22.31053.31101.30076.exe

  • Size

    6.9MB

  • Sample

    231211-exkrraead3

  • MD5

    4139235caf8470647c3f7f26e3dbd548

  • SHA1

    1f0184f12efc05600632c7368a6b87bff0e689c0

  • SHA256

    78a1ab788d84082d14bb9c6448b72d7c52ced0537c4785775a6a9e86b9cf339b

  • SHA512

    a59ad86836e279707b0f12a18ccdce20edd560ad2855b4cfbb5f9b569a438456c765beb728b440789089e5a649803a6fb9d71655148cd355dd8d9b2ee8ac32a4

  • SSDEEP

    196608:KK2+nNevvWstwr2m5BmycyEbSfasepd5e4x6+AjZ6mjxzj:KDY6tiP3myRfzepXe4ny8gxzj

Score
7/10

Malware Config

Targets

    • Target

      SecuriteInfo.com.Trojan.Siggen22.31053.31101.30076.exe

    • Size

      6.9MB

    • MD5

      4139235caf8470647c3f7f26e3dbd548

    • SHA1

      1f0184f12efc05600632c7368a6b87bff0e689c0

    • SHA256

      78a1ab788d84082d14bb9c6448b72d7c52ced0537c4785775a6a9e86b9cf339b

    • SHA512

      a59ad86836e279707b0f12a18ccdce20edd560ad2855b4cfbb5f9b569a438456c765beb728b440789089e5a649803a6fb9d71655148cd355dd8d9b2ee8ac32a4

    • SSDEEP

      196608:KK2+nNevvWstwr2m5BmycyEbSfasepd5e4x6+AjZ6mjxzj:KDY6tiP3myRfzepXe4ny8gxzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks