General

  • Target

    906ed1886de161352d7d940a1b63eadf810d8a44a8db677345da88e7b47da8bb

  • Size

    6.9MB

  • Sample

    231211-q2j7kahef2

  • MD5

    18b06b0a59a88d323dd3ad553f411662

  • SHA1

    916bdb984b117a4e28c858185cea889ae1d40b0f

  • SHA256

    906ed1886de161352d7d940a1b63eadf810d8a44a8db677345da88e7b47da8bb

  • SHA512

    946deecf2edde5995aaf6fde8d5e757f6b8fa73b52eecf404f1f6e0365ee64a505a1d77b72d1782d63cd468e74a76ae68771af924a34d7f5e402cb66cab989e1

  • SSDEEP

    196608:+DoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:+DyNLCWZ2HS9iQ7INzj

Score
7/10

Malware Config

Targets

    • Target

      906ed1886de161352d7d940a1b63eadf810d8a44a8db677345da88e7b47da8bb

    • Size

      6.9MB

    • MD5

      18b06b0a59a88d323dd3ad553f411662

    • SHA1

      916bdb984b117a4e28c858185cea889ae1d40b0f

    • SHA256

      906ed1886de161352d7d940a1b63eadf810d8a44a8db677345da88e7b47da8bb

    • SHA512

      946deecf2edde5995aaf6fde8d5e757f6b8fa73b52eecf404f1f6e0365ee64a505a1d77b72d1782d63cd468e74a76ae68771af924a34d7f5e402cb66cab989e1

    • SSDEEP

      196608:+DoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:+DyNLCWZ2HS9iQ7INzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks