General

  • Target

    bfa442a5c7e2a7fb04b7e110251b23c67441823a8208922db9b8fa2a0dfc4b99

  • Size

    6.9MB

  • Sample

    231211-qnttvaffak

  • MD5

    a8cbbb392ef65049c9348cb031d16a3c

  • SHA1

    952c979bca4c637eb12bdfa32765785a341389ef

  • SHA256

    bfa442a5c7e2a7fb04b7e110251b23c67441823a8208922db9b8fa2a0dfc4b99

  • SHA512

    fbec380e6854863ca83669d0adaf584a825a73bd3079d0a99bb5740cf12f19a7c1d6c682897b26b7df29e4992022bb0b3a8f63aa6eecd50f1cd69e1b1a5ad0da

  • SSDEEP

    196608:jW0fKLtr95HARqIrmVY8S50UL8Kj8yTwHvWY3Nzj:jtO/hAPmVNyEWeNzj

Score
7/10

Malware Config

Targets

    • Target

      bfa442a5c7e2a7fb04b7e110251b23c67441823a8208922db9b8fa2a0dfc4b99

    • Size

      6.9MB

    • MD5

      a8cbbb392ef65049c9348cb031d16a3c

    • SHA1

      952c979bca4c637eb12bdfa32765785a341389ef

    • SHA256

      bfa442a5c7e2a7fb04b7e110251b23c67441823a8208922db9b8fa2a0dfc4b99

    • SHA512

      fbec380e6854863ca83669d0adaf584a825a73bd3079d0a99bb5740cf12f19a7c1d6c682897b26b7df29e4992022bb0b3a8f63aa6eecd50f1cd69e1b1a5ad0da

    • SSDEEP

      196608:jW0fKLtr95HARqIrmVY8S50UL8Kj8yTwHvWY3Nzj:jtO/hAPmVNyEWeNzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks