General

  • Target

    aa28ad0b8a2e2942121312d00101db123300b206ab6a91502c64e6951f99de27

  • Size

    6.9MB

  • Sample

    231211-qg1ntafdbk

  • MD5

    b921940647beb30d7f14d915974a6d5c

  • SHA1

    1b2b05d5ed2fb5b92f9e5e77700647d67051ebb6

  • SHA256

    aa28ad0b8a2e2942121312d00101db123300b206ab6a91502c64e6951f99de27

  • SHA512

    077d138db5f31a11b4f5617803f99f37125376da40468efcad894affbbbfe0afbc9cc3f4ad283ca63f4aebcda5807060e314ef071ad0d9dbb45e9d089621980f

  • SSDEEP

    196608:oDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:oDyNLCWZ2HS9iQ7INzj

Score
7/10

Malware Config

Targets

    • Target

      aa28ad0b8a2e2942121312d00101db123300b206ab6a91502c64e6951f99de27

    • Size

      6.9MB

    • MD5

      b921940647beb30d7f14d915974a6d5c

    • SHA1

      1b2b05d5ed2fb5b92f9e5e77700647d67051ebb6

    • SHA256

      aa28ad0b8a2e2942121312d00101db123300b206ab6a91502c64e6951f99de27

    • SHA512

      077d138db5f31a11b4f5617803f99f37125376da40468efcad894affbbbfe0afbc9cc3f4ad283ca63f4aebcda5807060e314ef071ad0d9dbb45e9d089621980f

    • SSDEEP

      196608:oDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:oDyNLCWZ2HS9iQ7INzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks