General

  • Target

    394faf7d91c3cdf08e7a301958133cb35b155b53d8f9d3c1c795f32bd28ee56d

  • Size

    6.9MB

  • Sample

    231211-hbkreafedl

  • MD5

    49fd169c2966e76dd5af990eb071ed4d

  • SHA1

    65753a8ec123882f4d356123dcadf4e8cf48d25f

  • SHA256

    394faf7d91c3cdf08e7a301958133cb35b155b53d8f9d3c1c795f32bd28ee56d

  • SHA512

    f25da8610cf441aff51b3ee758527b6bce2517cc8a3421e6a2635d668a1d0b0d56869bf969c951ead6eb6eb6b7797099f68e6fdf673474ab47931c714c1ffdd8

  • SSDEEP

    98304:czyQ4kc+v4jvDhsQepuwmrkz216aPE8d9X+X1M2CX27eGqc6hxTGZtsAzFjTidLb:9Q4PTP94zHQ9OX1M2CGjn6hDc6LKEzj

Score
7/10

Malware Config

Targets

    • Target

      394faf7d91c3cdf08e7a301958133cb35b155b53d8f9d3c1c795f32bd28ee56d

    • Size

      6.9MB

    • MD5

      49fd169c2966e76dd5af990eb071ed4d

    • SHA1

      65753a8ec123882f4d356123dcadf4e8cf48d25f

    • SHA256

      394faf7d91c3cdf08e7a301958133cb35b155b53d8f9d3c1c795f32bd28ee56d

    • SHA512

      f25da8610cf441aff51b3ee758527b6bce2517cc8a3421e6a2635d668a1d0b0d56869bf969c951ead6eb6eb6b7797099f68e6fdf673474ab47931c714c1ffdd8

    • SSDEEP

      98304:czyQ4kc+v4jvDhsQepuwmrkz216aPE8d9X+X1M2CX27eGqc6hxTGZtsAzFjTidLb:9Q4PTP94zHQ9OX1M2CGjn6hDc6LKEzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks