General

  • Target

    968bdd50f50152d192ad7c979a512aabdac33509193158fe355ef70de04b1245

  • Size

    6.9MB

  • Sample

    231211-qwwcmsfhej

  • MD5

    06115ad4d9ea34d15937c87c7753818d

  • SHA1

    efc44f6688567fd1dd027003ddd0874f48b3c3bd

  • SHA256

    968bdd50f50152d192ad7c979a512aabdac33509193158fe355ef70de04b1245

  • SHA512

    4280ad0bb444d8eb31ac88325a3ed19b5089149d364d796b759cd4183e9c0178257a72bf52567050da1de8831a81f5fbf0cf4c81de03b9e2000a4a0e8aef0ca6

  • SSDEEP

    196608:/DoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:/DyNLCWZ2HS9iQ7INzj

Score
7/10

Malware Config

Targets

    • Target

      968bdd50f50152d192ad7c979a512aabdac33509193158fe355ef70de04b1245

    • Size

      6.9MB

    • MD5

      06115ad4d9ea34d15937c87c7753818d

    • SHA1

      efc44f6688567fd1dd027003ddd0874f48b3c3bd

    • SHA256

      968bdd50f50152d192ad7c979a512aabdac33509193158fe355ef70de04b1245

    • SHA512

      4280ad0bb444d8eb31ac88325a3ed19b5089149d364d796b759cd4183e9c0178257a72bf52567050da1de8831a81f5fbf0cf4c81de03b9e2000a4a0e8aef0ca6

    • SSDEEP

      196608:/DoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:/DyNLCWZ2HS9iQ7INzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks