General

  • Target

    0e1f286cf4565eb05e18797fd82818e08cd4e899c201649e6fef1a6fd78a12bb

  • Size

    6.9MB

  • Sample

    231211-gssynsehhk

  • MD5

    4c0201629d9d2db8d970252d7179d430

  • SHA1

    bd11290b0064856a96d63cf261b0e10ec59d6161

  • SHA256

    0e1f286cf4565eb05e18797fd82818e08cd4e899c201649e6fef1a6fd78a12bb

  • SHA512

    6e2909b79dc634e26f8ff38a9cb239f8aa33eeb03282629b4047d42a8b362ad288b9fce043fef5d77e7f766cd7457cf327567eb3d78278108fcb5fab0360ba4d

  • SSDEEP

    98304:2zyQ4kc+v4jvDhsQepuwmrkz216aPE8d9X+X1M2CX27eGqc6hxTGZtsAzFjTidLb:DQ4PTP94zHQ9OX1M2CGjn6hDc6LKEzj

Score
7/10

Malware Config

Targets

    • Target

      0e1f286cf4565eb05e18797fd82818e08cd4e899c201649e6fef1a6fd78a12bb

    • Size

      6.9MB

    • MD5

      4c0201629d9d2db8d970252d7179d430

    • SHA1

      bd11290b0064856a96d63cf261b0e10ec59d6161

    • SHA256

      0e1f286cf4565eb05e18797fd82818e08cd4e899c201649e6fef1a6fd78a12bb

    • SHA512

      6e2909b79dc634e26f8ff38a9cb239f8aa33eeb03282629b4047d42a8b362ad288b9fce043fef5d77e7f766cd7457cf327567eb3d78278108fcb5fab0360ba4d

    • SSDEEP

      98304:2zyQ4kc+v4jvDhsQepuwmrkz216aPE8d9X+X1M2CX27eGqc6hxTGZtsAzFjTidLb:DQ4PTP94zHQ9OX1M2CGjn6hDc6LKEzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks