General

  • Target

    1eba5eefe537f0f19c9b891b57d2a2fb8fa21302e1d0105285af601eb6704e27

  • Size

    7.5MB

  • Sample

    231211-va138adhd8

  • MD5

    ed2909eb629a62dee3057be81f17b06e

  • SHA1

    ce8abb3fa543bd82b7b6773bade1c00a57e58e2b

  • SHA256

    1eba5eefe537f0f19c9b891b57d2a2fb8fa21302e1d0105285af601eb6704e27

  • SHA512

    e798546a8703a3b6d8361bca47d79ee4c214909f3d860caca67241a4d9a16dd6fba2e0b80dab4c69441a21ce61e4e2d99cd9f3967cb2f0166115587e6001fde7

  • SSDEEP

    196608:tpVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:tpVBtvpbL/+vVYBrTTefzj

Score
7/10

Malware Config

Targets

    • Target

      1eba5eefe537f0f19c9b891b57d2a2fb8fa21302e1d0105285af601eb6704e27

    • Size

      7.5MB

    • MD5

      ed2909eb629a62dee3057be81f17b06e

    • SHA1

      ce8abb3fa543bd82b7b6773bade1c00a57e58e2b

    • SHA256

      1eba5eefe537f0f19c9b891b57d2a2fb8fa21302e1d0105285af601eb6704e27

    • SHA512

      e798546a8703a3b6d8361bca47d79ee4c214909f3d860caca67241a4d9a16dd6fba2e0b80dab4c69441a21ce61e4e2d99cd9f3967cb2f0166115587e6001fde7

    • SSDEEP

      196608:tpVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:tpVBtvpbL/+vVYBrTTefzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks