General

  • Target

    1537b6724286cf1207df51a7d91559dc88585f72ce76d332b9a6d9ac49a28904

  • Size

    6.9MB

  • Sample

    231211-r1hssahecr

  • MD5

    960de3b43d041a6314cba6873825fb3e

  • SHA1

    6e36c188980d998d1c20083b4073af4bbe836da7

  • SHA256

    1537b6724286cf1207df51a7d91559dc88585f72ce76d332b9a6d9ac49a28904

  • SHA512

    9fd3d9e5b4b8b6f15e5c9c9016de16af05b3586728644c3452fb601240f7b4fb2a6eb29cb0df2e085476e683612e6fc59bf2eb4b70f8ca18746cb321d130eb5b

  • SSDEEP

    196608:TDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:TDyNLCWZ2HS9iQ7INzj

Score
7/10

Malware Config

Targets

    • Target

      1537b6724286cf1207df51a7d91559dc88585f72ce76d332b9a6d9ac49a28904

    • Size

      6.9MB

    • MD5

      960de3b43d041a6314cba6873825fb3e

    • SHA1

      6e36c188980d998d1c20083b4073af4bbe836da7

    • SHA256

      1537b6724286cf1207df51a7d91559dc88585f72ce76d332b9a6d9ac49a28904

    • SHA512

      9fd3d9e5b4b8b6f15e5c9c9016de16af05b3586728644c3452fb601240f7b4fb2a6eb29cb0df2e085476e683612e6fc59bf2eb4b70f8ca18746cb321d130eb5b

    • SSDEEP

      196608:TDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:TDyNLCWZ2HS9iQ7INzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks