General

  • Target

    6857e1c1384078b5af36b997aa3d392fe7fce8a78673094800fd0aea8b742b02

  • Size

    6.9MB

  • Sample

    231211-q2l16ahef7

  • MD5

    65072ef102c15aa8b9dd5fe1df6a96cf

  • SHA1

    d3bcc50a5a87a02d73d67e4b30c55f156855d9ec

  • SHA256

    6857e1c1384078b5af36b997aa3d392fe7fce8a78673094800fd0aea8b742b02

  • SHA512

    1da2e03a0aad7edbabdb04532cea357b03bf363a24da6ec4b5a4eda56b440fa3d6f61e112a5513fdfd4a431e2d2b28045dc1be14bd84517dd07f228d472a13a7

  • SSDEEP

    196608:cbw61woT7mRIc+DaTblZEZTXuNkrAk8TQNY0pzj:cbw61woTCR9+OTbl0Zo/Gzj

Score
7/10

Malware Config

Targets

    • Target

      6857e1c1384078b5af36b997aa3d392fe7fce8a78673094800fd0aea8b742b02

    • Size

      6.9MB

    • MD5

      65072ef102c15aa8b9dd5fe1df6a96cf

    • SHA1

      d3bcc50a5a87a02d73d67e4b30c55f156855d9ec

    • SHA256

      6857e1c1384078b5af36b997aa3d392fe7fce8a78673094800fd0aea8b742b02

    • SHA512

      1da2e03a0aad7edbabdb04532cea357b03bf363a24da6ec4b5a4eda56b440fa3d6f61e112a5513fdfd4a431e2d2b28045dc1be14bd84517dd07f228d472a13a7

    • SSDEEP

      196608:cbw61woT7mRIc+DaTblZEZTXuNkrAk8TQNY0pzj:cbw61woTCR9+OTbl0Zo/Gzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks