General

  • Target

    b36be519c3408b02e067b3ac3863569b05d699603b9088b84c565dfa16fc4941

  • Size

    6.9MB

  • Sample

    231211-n1gc6sfbe3

  • MD5

    ca09ba185a232eca4451c020f1b3fb4c

  • SHA1

    fb8bf24442e960d291d924bf89f9584b77cb4244

  • SHA256

    b36be519c3408b02e067b3ac3863569b05d699603b9088b84c565dfa16fc4941

  • SHA512

    aaa0d0b1d2b0361ffa8079fca25ccac9c889f8e9a991f24c1df02fd7012f6b0a5910459c8e4a9c374158f6edef63bf96df14bda7191a1061ceabe574f0433c39

  • SSDEEP

    98304:QzyQ4kc+v4jvDhsQepuwmrkz216aPE8d9X+X1M2CX27eGqc6hxTGZtsAzFjTidLb:JQ4PTP94zHQ9OX1M2CGjn6hDc6LKEzj

Score
7/10

Malware Config

Targets

    • Target

      b36be519c3408b02e067b3ac3863569b05d699603b9088b84c565dfa16fc4941

    • Size

      6.9MB

    • MD5

      ca09ba185a232eca4451c020f1b3fb4c

    • SHA1

      fb8bf24442e960d291d924bf89f9584b77cb4244

    • SHA256

      b36be519c3408b02e067b3ac3863569b05d699603b9088b84c565dfa16fc4941

    • SHA512

      aaa0d0b1d2b0361ffa8079fca25ccac9c889f8e9a991f24c1df02fd7012f6b0a5910459c8e4a9c374158f6edef63bf96df14bda7191a1061ceabe574f0433c39

    • SSDEEP

      98304:QzyQ4kc+v4jvDhsQepuwmrkz216aPE8d9X+X1M2CX27eGqc6hxTGZtsAzFjTidLb:JQ4PTP94zHQ9OX1M2CGjn6hDc6LKEzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks