General

  • Target

    40327fdc4d6efe2edfe6a18a2324daf23261ff3d15e33a19621e8b16cc6620d4

  • Size

    6.9MB

  • Sample

    231211-ftw62sdheq

  • MD5

    33f3c31a598ad540f698c48a287101c5

  • SHA1

    899f7f3f4e720cd2d7e9b5719e2a56922ae8d53f

  • SHA256

    40327fdc4d6efe2edfe6a18a2324daf23261ff3d15e33a19621e8b16cc6620d4

  • SHA512

    37e21720f4817fbedd591f17252dbcf27f9bde097e4b37988ff01903fbc50182b2039adbea730ca34e3ee95e006e7e90150eadbc58f01e83f1928f061bc03840

  • SSDEEP

    98304:lzyQ4kc+v4jvDhsQepuwmrkz216aPE8d9X+X1M2CX27eGqc6hxTGZtsAzFjTidLb:oQ4PTP94zHQ9OX1M2CGjn6hDc6LKEzj

Score
7/10

Malware Config

Targets

    • Target

      40327fdc4d6efe2edfe6a18a2324daf23261ff3d15e33a19621e8b16cc6620d4

    • Size

      6.9MB

    • MD5

      33f3c31a598ad540f698c48a287101c5

    • SHA1

      899f7f3f4e720cd2d7e9b5719e2a56922ae8d53f

    • SHA256

      40327fdc4d6efe2edfe6a18a2324daf23261ff3d15e33a19621e8b16cc6620d4

    • SHA512

      37e21720f4817fbedd591f17252dbcf27f9bde097e4b37988ff01903fbc50182b2039adbea730ca34e3ee95e006e7e90150eadbc58f01e83f1928f061bc03840

    • SSDEEP

      98304:lzyQ4kc+v4jvDhsQepuwmrkz216aPE8d9X+X1M2CX27eGqc6hxTGZtsAzFjTidLb:oQ4PTP94zHQ9OX1M2CGjn6hDc6LKEzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks