General

  • Target

    db6ffb3f3ac164e3ebb3a5c9616f03ca0105b2fa390961c3ecef98d26b2f05a7

  • Size

    7.5MB

  • Sample

    231211-ww9g6aeahq

  • MD5

    be8eda948a10a655ce09c05c3ce2cc52

  • SHA1

    65af611792055818f9849d56ae527bd8184a99bd

  • SHA256

    db6ffb3f3ac164e3ebb3a5c9616f03ca0105b2fa390961c3ecef98d26b2f05a7

  • SHA512

    804f42fa16eb4212dc396feb7684228ccea8f17810624fc9e2bbf106519b23239ccdc68d2d3eeaa57a3275e6c4ddb0f8d32695c4d314dcae902579411e7caf0f

  • SSDEEP

    196608:lpVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:lpVBtvpbL/+vVYBrTTefzj

Score
7/10

Malware Config

Targets

    • Target

      db6ffb3f3ac164e3ebb3a5c9616f03ca0105b2fa390961c3ecef98d26b2f05a7

    • Size

      7.5MB

    • MD5

      be8eda948a10a655ce09c05c3ce2cc52

    • SHA1

      65af611792055818f9849d56ae527bd8184a99bd

    • SHA256

      db6ffb3f3ac164e3ebb3a5c9616f03ca0105b2fa390961c3ecef98d26b2f05a7

    • SHA512

      804f42fa16eb4212dc396feb7684228ccea8f17810624fc9e2bbf106519b23239ccdc68d2d3eeaa57a3275e6c4ddb0f8d32695c4d314dcae902579411e7caf0f

    • SSDEEP

      196608:lpVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:lpVBtvpbL/+vVYBrTTefzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks