General

  • Target

    eb42c5aeb11c990ad53281c64114c754230f0c32e8facab5aad95ff9e69d1b30

  • Size

    6.9MB

  • Sample

    231211-pg389sebhq

  • MD5

    da85aa9fae4af4bbdc768b66d09027a9

  • SHA1

    3fb0bc5329c5ffb51d860c0e39924afb654605f1

  • SHA256

    eb42c5aeb11c990ad53281c64114c754230f0c32e8facab5aad95ff9e69d1b30

  • SHA512

    0b861da3eabcd0c5a6757e965193a5132a0a96ebb6c2abe88c1c8bfa1ebd08d1ce0136d4cecb843ffd0a4ed296dda63d109d32e0caa9d97d1965aeda1b81622e

  • SSDEEP

    196608:KeusL5Sg97UrK5EvfjuiKsrGugWn7juD9k3Ozj:xVsg95KnxLrGufn765k+zj

Score
7/10

Malware Config

Targets

    • Target

      eb42c5aeb11c990ad53281c64114c754230f0c32e8facab5aad95ff9e69d1b30

    • Size

      6.9MB

    • MD5

      da85aa9fae4af4bbdc768b66d09027a9

    • SHA1

      3fb0bc5329c5ffb51d860c0e39924afb654605f1

    • SHA256

      eb42c5aeb11c990ad53281c64114c754230f0c32e8facab5aad95ff9e69d1b30

    • SHA512

      0b861da3eabcd0c5a6757e965193a5132a0a96ebb6c2abe88c1c8bfa1ebd08d1ce0136d4cecb843ffd0a4ed296dda63d109d32e0caa9d97d1965aeda1b81622e

    • SSDEEP

      196608:KeusL5Sg97UrK5EvfjuiKsrGugWn7juD9k3Ozj:xVsg95KnxLrGufn765k+zj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks