General

  • Target

    4e5bd63c1eb4ea59109ed0a93630a86603817b9f74cca78f80505f609b5b7155

  • Size

    6.9MB

  • Sample

    231211-reyl4sgfgm

  • MD5

    36f898160e2cb58e51c3fa1067f2b6ed

  • SHA1

    f01fb278d57267896d72a3a491cd131f142e29c0

  • SHA256

    4e5bd63c1eb4ea59109ed0a93630a86603817b9f74cca78f80505f609b5b7155

  • SHA512

    2e0770c7d1a238aec227890142a76a9a1d35e8e2b8da648cbedc7b89d2297126a45e7e4601cdb4140733ad7cbf2364172143914ab3dd1a7d0a432529a95e0286

  • SSDEEP

    196608:fDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:fDyNLCWZ2HS9iQ7INzj

Score
7/10

Malware Config

Targets

    • Target

      4e5bd63c1eb4ea59109ed0a93630a86603817b9f74cca78f80505f609b5b7155

    • Size

      6.9MB

    • MD5

      36f898160e2cb58e51c3fa1067f2b6ed

    • SHA1

      f01fb278d57267896d72a3a491cd131f142e29c0

    • SHA256

      4e5bd63c1eb4ea59109ed0a93630a86603817b9f74cca78f80505f609b5b7155

    • SHA512

      2e0770c7d1a238aec227890142a76a9a1d35e8e2b8da648cbedc7b89d2297126a45e7e4601cdb4140733ad7cbf2364172143914ab3dd1a7d0a432529a95e0286

    • SSDEEP

      196608:fDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:fDyNLCWZ2HS9iQ7INzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks