General

  • Target

    4b1656b3b4f5ed653a529b1cf72cb6375f16633e1d95f6bda54251dfbeffd280

  • Size

    6.9MB

  • Sample

    231211-kw3ttsbff9

  • MD5

    9cb9878a2522e75d7ee792aae9175770

  • SHA1

    6844332c31f3ed6bd07a7712d7204ff01333c54b

  • SHA256

    4b1656b3b4f5ed653a529b1cf72cb6375f16633e1d95f6bda54251dfbeffd280

  • SHA512

    99175b79cbe93ee91db17499ff9b934e641cffe50a0d91f87f223cdecfd7e97cf5203ce4fb4b4a5cba49cd79ceec4f695aed42a50e6d74f3eb6b02b744bd9fa5

  • SSDEEP

    196608:/yD4UUAnfcrSuleVp+jatZRGrrC/sF5wvACzj:G4Uvfc2RGatZcXF5uzj

Score
7/10

Malware Config

Targets

    • Target

      4b1656b3b4f5ed653a529b1cf72cb6375f16633e1d95f6bda54251dfbeffd280

    • Size

      6.9MB

    • MD5

      9cb9878a2522e75d7ee792aae9175770

    • SHA1

      6844332c31f3ed6bd07a7712d7204ff01333c54b

    • SHA256

      4b1656b3b4f5ed653a529b1cf72cb6375f16633e1d95f6bda54251dfbeffd280

    • SHA512

      99175b79cbe93ee91db17499ff9b934e641cffe50a0d91f87f223cdecfd7e97cf5203ce4fb4b4a5cba49cd79ceec4f695aed42a50e6d74f3eb6b02b744bd9fa5

    • SSDEEP

      196608:/yD4UUAnfcrSuleVp+jatZRGrrC/sF5wvACzj:G4Uvfc2RGatZcXF5uzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks