General

  • Target

    4a7ec6a42d65ee94bacbd9201216b7b73e8c1c24b56a59f6141b2e8c2586d59a

  • Size

    6.9MB

  • Sample

    231211-gm9dgagba7

  • MD5

    1e670590799440bc8fb19a05b9e75cd8

  • SHA1

    0544e06caa292009bb79a9f16ac3d00be73d1e29

  • SHA256

    4a7ec6a42d65ee94bacbd9201216b7b73e8c1c24b56a59f6141b2e8c2586d59a

  • SHA512

    bad1b82f0b3e4c8e4985c7cc25cb46ddc592304a07c5ddd7cbfd660cb5b915ddbab0aec5bcbec2eba01f97f99b5383d5abae17dad2e861e977b8a0617f8a44a3

  • SSDEEP

    98304:KzyQ4kc+v4jvDhsQepuwmrkz216aPE8d9X+X1M2CX27eGqc6hxTGZtsAzFjTidLb:vQ4PTP94zHQ9OX1M2CGjn6hDc6LKEzj

Score
7/10

Malware Config

Targets

    • Target

      4a7ec6a42d65ee94bacbd9201216b7b73e8c1c24b56a59f6141b2e8c2586d59a

    • Size

      6.9MB

    • MD5

      1e670590799440bc8fb19a05b9e75cd8

    • SHA1

      0544e06caa292009bb79a9f16ac3d00be73d1e29

    • SHA256

      4a7ec6a42d65ee94bacbd9201216b7b73e8c1c24b56a59f6141b2e8c2586d59a

    • SHA512

      bad1b82f0b3e4c8e4985c7cc25cb46ddc592304a07c5ddd7cbfd660cb5b915ddbab0aec5bcbec2eba01f97f99b5383d5abae17dad2e861e977b8a0617f8a44a3

    • SSDEEP

      98304:KzyQ4kc+v4jvDhsQepuwmrkz216aPE8d9X+X1M2CX27eGqc6hxTGZtsAzFjTidLb:vQ4PTP94zHQ9OX1M2CGjn6hDc6LKEzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks