General

  • Target

    56b5a14c5aa7233da336e33719094fe94a1627d5723c42ca333b65a148e55c83

  • Size

    6.9MB

  • Sample

    231211-rtz4gshcem

  • MD5

    38b6328bae50f001ea95840ead2f071f

  • SHA1

    a34fa0f98bd48b45bb2f4855e25b174d03f7ad4e

  • SHA256

    56b5a14c5aa7233da336e33719094fe94a1627d5723c42ca333b65a148e55c83

  • SHA512

    f05403344e1ee75bc6079b8032a3dba680251713665e08f1d26c16a12ff60ebbd4232e788c852229c2502dbd2849857349b7bedacc205991cbe997beb7211b5a

  • SSDEEP

    196608:hxOlhkHxfDumIwWJfU1IzKkGjAqiuGIqOg9zj:KjkHxfKTnJjzKkRtF9zj

Score
7/10

Malware Config

Targets

    • Target

      56b5a14c5aa7233da336e33719094fe94a1627d5723c42ca333b65a148e55c83

    • Size

      6.9MB

    • MD5

      38b6328bae50f001ea95840ead2f071f

    • SHA1

      a34fa0f98bd48b45bb2f4855e25b174d03f7ad4e

    • SHA256

      56b5a14c5aa7233da336e33719094fe94a1627d5723c42ca333b65a148e55c83

    • SHA512

      f05403344e1ee75bc6079b8032a3dba680251713665e08f1d26c16a12ff60ebbd4232e788c852229c2502dbd2849857349b7bedacc205991cbe997beb7211b5a

    • SSDEEP

      196608:hxOlhkHxfDumIwWJfU1IzKkGjAqiuGIqOg9zj:KjkHxfKTnJjzKkRtF9zj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks