General

  • Target

    381595f5970fdb9eb68da1a0a652c8199a4d9ba82abe86ac4f3d942b7b041134

  • Size

    6.9MB

  • Sample

    231211-rxhcvaafh4

  • MD5

    79e460d74ece442ea8b150401a40aa02

  • SHA1

    122c43cfe4b28065969548e5000f4fe91c69e540

  • SHA256

    381595f5970fdb9eb68da1a0a652c8199a4d9ba82abe86ac4f3d942b7b041134

  • SHA512

    748e76dfddaae36e63faf1aa44f638b7450c9734869128e76eacda51e28de4e185e8e2f4800315c03fa4fbf92e1698f7ac5a4022aa40abd87cd64806df90f763

  • SSDEEP

    196608:SW0fKLtr95HARqIrmVY8S50UL8Kj8yTwHvWY3Nzj:StO/hAPmVNyEWeNzj

Score
7/10

Malware Config

Targets

    • Target

      381595f5970fdb9eb68da1a0a652c8199a4d9ba82abe86ac4f3d942b7b041134

    • Size

      6.9MB

    • MD5

      79e460d74ece442ea8b150401a40aa02

    • SHA1

      122c43cfe4b28065969548e5000f4fe91c69e540

    • SHA256

      381595f5970fdb9eb68da1a0a652c8199a4d9ba82abe86ac4f3d942b7b041134

    • SHA512

      748e76dfddaae36e63faf1aa44f638b7450c9734869128e76eacda51e28de4e185e8e2f4800315c03fa4fbf92e1698f7ac5a4022aa40abd87cd64806df90f763

    • SSDEEP

      196608:SW0fKLtr95HARqIrmVY8S50UL8Kj8yTwHvWY3Nzj:StO/hAPmVNyEWeNzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks