General
-
Target
db6ffb3f3ac164e3ebb3a5c9616f03ca0105b2fa390961c3ecef98d26b2f05a7
-
Size
7.5MB
-
Sample
231211-ww9g6aeahq
-
MD5
be8eda948a10a655ce09c05c3ce2cc52
-
SHA1
65af611792055818f9849d56ae527bd8184a99bd
-
SHA256
db6ffb3f3ac164e3ebb3a5c9616f03ca0105b2fa390961c3ecef98d26b2f05a7
-
SHA512
804f42fa16eb4212dc396feb7684228ccea8f17810624fc9e2bbf106519b23239ccdc68d2d3eeaa57a3275e6c4ddb0f8d32695c4d314dcae902579411e7caf0f
-
SSDEEP
196608:lpVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:lpVBtvpbL/+vVYBrTTefzj
Static task
static1
Behavioral task
behavioral1
Sample
db6ffb3f3ac164e3ebb3a5c9616f03ca0105b2fa390961c3ecef98d26b2f05a7.exe
Resource
win10-20231129-en
Malware Config
Targets
-
-
Target
db6ffb3f3ac164e3ebb3a5c9616f03ca0105b2fa390961c3ecef98d26b2f05a7
-
Size
7.5MB
-
MD5
be8eda948a10a655ce09c05c3ce2cc52
-
SHA1
65af611792055818f9849d56ae527bd8184a99bd
-
SHA256
db6ffb3f3ac164e3ebb3a5c9616f03ca0105b2fa390961c3ecef98d26b2f05a7
-
SHA512
804f42fa16eb4212dc396feb7684228ccea8f17810624fc9e2bbf106519b23239ccdc68d2d3eeaa57a3275e6c4ddb0f8d32695c4d314dcae902579411e7caf0f
-
SSDEEP
196608:lpVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:lpVBtvpbL/+vVYBrTTefzj
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-