General

  • Target

    aa57d5cf3fda98c93c9ef633786930501a6b2ed6226011c6436b21fecfe2b63a

  • Size

    6.9MB

  • Sample

    231211-r7aezshgcl

  • MD5

    86eb2fa4c81c95b7b45604a0600f6121

  • SHA1

    b18f7a0b223cc8cd520545b406092ad165778ae6

  • SHA256

    aa57d5cf3fda98c93c9ef633786930501a6b2ed6226011c6436b21fecfe2b63a

  • SHA512

    cadcfc596b0ad34250cbcb956b2373c581e8e4504cebc4b5b0957539ccfe83b7c9ad2c17b2b638511c5912a068cd9c75a2649e31cac5bf4fff07f362fa5db625

  • SSDEEP

    196608:jeusL5Sg97UrK5EvfjuiKsrGugWn7juD9k3Ozj:yVsg95KnxLrGufn765k+zj

Score
7/10

Malware Config

Targets

    • Target

      aa57d5cf3fda98c93c9ef633786930501a6b2ed6226011c6436b21fecfe2b63a

    • Size

      6.9MB

    • MD5

      86eb2fa4c81c95b7b45604a0600f6121

    • SHA1

      b18f7a0b223cc8cd520545b406092ad165778ae6

    • SHA256

      aa57d5cf3fda98c93c9ef633786930501a6b2ed6226011c6436b21fecfe2b63a

    • SHA512

      cadcfc596b0ad34250cbcb956b2373c581e8e4504cebc4b5b0957539ccfe83b7c9ad2c17b2b638511c5912a068cd9c75a2649e31cac5bf4fff07f362fa5db625

    • SSDEEP

      196608:jeusL5Sg97UrK5EvfjuiKsrGugWn7juD9k3Ozj:yVsg95KnxLrGufn765k+zj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks