General

  • Target

    ce816dbe876cf8fecfaf9470c72fa8d5e9f09de8ca2791fa1b9026c643be5d00

  • Size

    6.9MB

  • Sample

    231211-g8xxkafdgl

  • MD5

    0802dab1b3ad275f6d1389336abfe724

  • SHA1

    f55a6b0fdb6740bb7110c495dbf609f57752c630

  • SHA256

    ce816dbe876cf8fecfaf9470c72fa8d5e9f09de8ca2791fa1b9026c643be5d00

  • SHA512

    8d6b82ab5ab6522294f78cebcd604a1d9d632d6d79dfc37dc4913486b11f97094387789c0af8db13a2cf3fac0d62cb86f8c630cc2f82a1a201e7ddcc9dd85863

  • SSDEEP

    196608:RH/2cOhoGEpX+jRFRvz29jgM7+3Utny3r/mvZO0agzj:IcOhoGE1ArRvqlgM7xtAT0Hzj

Score
7/10

Malware Config

Targets

    • Target

      ce816dbe876cf8fecfaf9470c72fa8d5e9f09de8ca2791fa1b9026c643be5d00

    • Size

      6.9MB

    • MD5

      0802dab1b3ad275f6d1389336abfe724

    • SHA1

      f55a6b0fdb6740bb7110c495dbf609f57752c630

    • SHA256

      ce816dbe876cf8fecfaf9470c72fa8d5e9f09de8ca2791fa1b9026c643be5d00

    • SHA512

      8d6b82ab5ab6522294f78cebcd604a1d9d632d6d79dfc37dc4913486b11f97094387789c0af8db13a2cf3fac0d62cb86f8c630cc2f82a1a201e7ddcc9dd85863

    • SSDEEP

      196608:RH/2cOhoGEpX+jRFRvz29jgM7+3Utny3r/mvZO0agzj:IcOhoGE1ArRvqlgM7xtAT0Hzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks