General

  • Target

    ed16664c8c79401f1e37e258da3ed0abba87dd79c5a5c70698df2977628ce56f

  • Size

    6.9MB

  • Sample

    231211-sd7n3aaafk

  • MD5

    ce0bf005d5cb5d3a5f4af30e27c4f271

  • SHA1

    276bd6a4b4a19a1e6e44545c7dd29cee619b7888

  • SHA256

    ed16664c8c79401f1e37e258da3ed0abba87dd79c5a5c70698df2977628ce56f

  • SHA512

    07e4d149c58198638e30718070402b796be03a2aa6320eb3f10791b376cbfd9d6e6e696f46a310e11a134600b32a441f1f97817be14adaaab7b6bd5da888edc1

  • SSDEEP

    196608:wDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:wDyNLCWZ2HS9iQ7INzj

Score
7/10

Malware Config

Targets

    • Target

      ed16664c8c79401f1e37e258da3ed0abba87dd79c5a5c70698df2977628ce56f

    • Size

      6.9MB

    • MD5

      ce0bf005d5cb5d3a5f4af30e27c4f271

    • SHA1

      276bd6a4b4a19a1e6e44545c7dd29cee619b7888

    • SHA256

      ed16664c8c79401f1e37e258da3ed0abba87dd79c5a5c70698df2977628ce56f

    • SHA512

      07e4d149c58198638e30718070402b796be03a2aa6320eb3f10791b376cbfd9d6e6e696f46a310e11a134600b32a441f1f97817be14adaaab7b6bd5da888edc1

    • SSDEEP

      196608:wDoG3bFqjpLC0TSMLsn33HR83v9i8l7INzj:wDyNLCWZ2HS9iQ7INzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks