General

  • Target

    a2b20ef6424871ecdd13241ba931d578e001a8817e3c5a1667df2f4cf74dfb41

  • Size

    6.9MB

  • Sample

    231211-n9gqaseacl

  • MD5

    7d7e33fac2f7d9f367d9d053fe119480

  • SHA1

    3ced088c3dfd55bbd7d2e1e7c923d9cbf236c123

  • SHA256

    a2b20ef6424871ecdd13241ba931d578e001a8817e3c5a1667df2f4cf74dfb41

  • SHA512

    4295b07eac2640a176cfa82791136663b03a08d78c64c6c651486b0f63f00f6b38e096e29600e43aa13563a1634d3e84cfab41476bee5f4881ba13833c30a5b7

  • SSDEEP

    196608:uDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:uDyNLCWZ2HS9iQ7INzj

Score
7/10

Malware Config

Targets

    • Target

      a2b20ef6424871ecdd13241ba931d578e001a8817e3c5a1667df2f4cf74dfb41

    • Size

      6.9MB

    • MD5

      7d7e33fac2f7d9f367d9d053fe119480

    • SHA1

      3ced088c3dfd55bbd7d2e1e7c923d9cbf236c123

    • SHA256

      a2b20ef6424871ecdd13241ba931d578e001a8817e3c5a1667df2f4cf74dfb41

    • SHA512

      4295b07eac2640a176cfa82791136663b03a08d78c64c6c651486b0f63f00f6b38e096e29600e43aa13563a1634d3e84cfab41476bee5f4881ba13833c30a5b7

    • SSDEEP

      196608:uDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:uDyNLCWZ2HS9iQ7INzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks