General

  • Target

    63206bdbfdb004b0cb8cbf070e13177057f8ea82ce53b8a7a0034e551cfa22c9

  • Size

    6.9MB

  • Sample

    231211-ps33msgag2

  • MD5

    dbd8038a4858240e4b28483922c5bf7e

  • SHA1

    b422726dd26d4d8ac141082d4975203df3f43691

  • SHA256

    63206bdbfdb004b0cb8cbf070e13177057f8ea82ce53b8a7a0034e551cfa22c9

  • SHA512

    869a043cf8f9bacc42e630723259b47808a9b91fef9bd3fb88a569b13faa2db32cb7b529ed329fbf80b299df14e2233ed000574de64b9c181dc07924783cd4c1

  • SSDEEP

    196608:KDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:KDyNLCWZ2HS9iQ7INzj

Score
7/10

Malware Config

Targets

    • Target

      63206bdbfdb004b0cb8cbf070e13177057f8ea82ce53b8a7a0034e551cfa22c9

    • Size

      6.9MB

    • MD5

      dbd8038a4858240e4b28483922c5bf7e

    • SHA1

      b422726dd26d4d8ac141082d4975203df3f43691

    • SHA256

      63206bdbfdb004b0cb8cbf070e13177057f8ea82ce53b8a7a0034e551cfa22c9

    • SHA512

      869a043cf8f9bacc42e630723259b47808a9b91fef9bd3fb88a569b13faa2db32cb7b529ed329fbf80b299df14e2233ed000574de64b9c181dc07924783cd4c1

    • SSDEEP

      196608:KDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:KDyNLCWZ2HS9iQ7INzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks