General

  • Target

    3ea1a4f67cbe8d6d5ad44de2a3dcc4b6aced18ce10d08aa7a4e4adb0369daa8b

  • Size

    6.9MB

  • Sample

    231211-kz9rjsaeer

  • MD5

    cf704fcfa7d469d50b4cb07c09da2efe

  • SHA1

    00c748cdff7c7e0180af2fecaa872a0d5583c5da

  • SHA256

    3ea1a4f67cbe8d6d5ad44de2a3dcc4b6aced18ce10d08aa7a4e4adb0369daa8b

  • SHA512

    feaf9f8f57784f67d20ee661d4a037edc6783cc246adf15ceee89a14072e45f7c38ec44d32455efad2bc04c7d1c8d82cdb8380440992cbf0f4fe48cd12b1a24f

  • SSDEEP

    98304:6zyQ4kc+v4jvDhsQepuwmrkz216aPE8d9X+X1M2CX27eGqc6hxTGZtsAzFjTidLb:fQ4PTP94zHQ9OX1M2CGjn6hDc6LKEzj

Score
7/10

Malware Config

Targets

    • Target

      3ea1a4f67cbe8d6d5ad44de2a3dcc4b6aced18ce10d08aa7a4e4adb0369daa8b

    • Size

      6.9MB

    • MD5

      cf704fcfa7d469d50b4cb07c09da2efe

    • SHA1

      00c748cdff7c7e0180af2fecaa872a0d5583c5da

    • SHA256

      3ea1a4f67cbe8d6d5ad44de2a3dcc4b6aced18ce10d08aa7a4e4adb0369daa8b

    • SHA512

      feaf9f8f57784f67d20ee661d4a037edc6783cc246adf15ceee89a14072e45f7c38ec44d32455efad2bc04c7d1c8d82cdb8380440992cbf0f4fe48cd12b1a24f

    • SSDEEP

      98304:6zyQ4kc+v4jvDhsQepuwmrkz216aPE8d9X+X1M2CX27eGqc6hxTGZtsAzFjTidLb:fQ4PTP94zHQ9OX1M2CGjn6hDc6LKEzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks