General

  • Target

    95fe283d53e8e543d51cfaf29b48845afb0359eafcbf910932cd4011e16fba1d

  • Size

    6.9MB

  • Sample

    231211-lewvmacce7

  • MD5

    703a87a8187e5628813335bab4de8025

  • SHA1

    dbcc0abeaccf56c86029507439f8b87dacb54543

  • SHA256

    95fe283d53e8e543d51cfaf29b48845afb0359eafcbf910932cd4011e16fba1d

  • SHA512

    6223f9676a7d6899091dddcf7170b597be2f744cd323d631f6d61c0e7246116cffa9718baee0aba658d46c3a8d200e78337058efecd57a7382c2247f5f3e4813

  • SSDEEP

    196608:5H/2cOhoGEpX+jRFRvz29jgM7+3Utny3r/mvZO0agzj:wcOhoGE1ArRvqlgM7xtAT0Hzj

Score
7/10

Malware Config

Targets

    • Target

      95fe283d53e8e543d51cfaf29b48845afb0359eafcbf910932cd4011e16fba1d

    • Size

      6.9MB

    • MD5

      703a87a8187e5628813335bab4de8025

    • SHA1

      dbcc0abeaccf56c86029507439f8b87dacb54543

    • SHA256

      95fe283d53e8e543d51cfaf29b48845afb0359eafcbf910932cd4011e16fba1d

    • SHA512

      6223f9676a7d6899091dddcf7170b597be2f744cd323d631f6d61c0e7246116cffa9718baee0aba658d46c3a8d200e78337058efecd57a7382c2247f5f3e4813

    • SSDEEP

      196608:5H/2cOhoGEpX+jRFRvz29jgM7+3Utny3r/mvZO0agzj:wcOhoGE1ArRvqlgM7xtAT0Hzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks