General

  • Target

    1bdabadfa9d7461a390aa57af9512f6a8882cef28437da99d1795b9d3c11493e

  • Size

    6.9MB

  • Sample

    231211-qgfnmsghd3

  • MD5

    5beb5fdb7fe114bca506184b922cda44

  • SHA1

    36a52ddae5b45eb449e6394d1b1b431c71a2253c

  • SHA256

    1bdabadfa9d7461a390aa57af9512f6a8882cef28437da99d1795b9d3c11493e

  • SHA512

    0fe779047de28a98b2a7da22bdd518ffa1771032e48d50dff9a8097595f89041661ad199eacae35b748eded23ea1754730f9ac821c7068532c88e46739514e58

  • SSDEEP

    196608:9DoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:9DyNLCWZ2HS9iQ7INzj

Score
7/10

Malware Config

Targets

    • Target

      1bdabadfa9d7461a390aa57af9512f6a8882cef28437da99d1795b9d3c11493e

    • Size

      6.9MB

    • MD5

      5beb5fdb7fe114bca506184b922cda44

    • SHA1

      36a52ddae5b45eb449e6394d1b1b431c71a2253c

    • SHA256

      1bdabadfa9d7461a390aa57af9512f6a8882cef28437da99d1795b9d3c11493e

    • SHA512

      0fe779047de28a98b2a7da22bdd518ffa1771032e48d50dff9a8097595f89041661ad199eacae35b748eded23ea1754730f9ac821c7068532c88e46739514e58

    • SSDEEP

      196608:9DoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:9DyNLCWZ2HS9iQ7INzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks