General

  • Target

    d0a15f496a0282cc583c8a653720f1f8d1147026ef871f32137587f0748c1e16

  • Size

    7.5MB

  • Sample

    231211-wnvn2adhap

  • MD5

    955504185bc0ce02ded6037fc95e59a4

  • SHA1

    f23af921dab941f44821e0d954b1710af2dff7f7

  • SHA256

    d0a15f496a0282cc583c8a653720f1f8d1147026ef871f32137587f0748c1e16

  • SHA512

    c99642d3120f5d1ffd440fca63da8d518207c96817b061a51f469f5bd64081b180cc1eb180a95aa663667759cf3a38561db8563513f4b9bdeb955e8df07e2893

  • SSDEEP

    196608:Sq/iLRC0OLkYNew6tjCtD2RQVsBp4UAzj:SHC9Lkuew6t2oCO9Azj

Score
7/10

Malware Config

Targets

    • Target

      d0a15f496a0282cc583c8a653720f1f8d1147026ef871f32137587f0748c1e16

    • Size

      7.5MB

    • MD5

      955504185bc0ce02ded6037fc95e59a4

    • SHA1

      f23af921dab941f44821e0d954b1710af2dff7f7

    • SHA256

      d0a15f496a0282cc583c8a653720f1f8d1147026ef871f32137587f0748c1e16

    • SHA512

      c99642d3120f5d1ffd440fca63da8d518207c96817b061a51f469f5bd64081b180cc1eb180a95aa663667759cf3a38561db8563513f4b9bdeb955e8df07e2893

    • SSDEEP

      196608:Sq/iLRC0OLkYNew6tjCtD2RQVsBp4UAzj:SHC9Lkuew6t2oCO9Azj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks