General

  • Target

    5e79ed885c85c38dbaa1f38d99d7908523fec6347afa765c5b0964edf6b1bf67

  • Size

    7.5MB

  • Sample

    231211-xgtc3aegbl

  • MD5

    291a47257db466c1047c2d81b3dfc8e6

  • SHA1

    b2b5439879f807c6bbe77043907f5ff877c73297

  • SHA256

    5e79ed885c85c38dbaa1f38d99d7908523fec6347afa765c5b0964edf6b1bf67

  • SHA512

    37d5fd3e5bfe4f1af55d001fc8e06df7d72308fc3f646ef07a84439bf1454399a08dffadbd55d221c78a605b6b2f09ccb90f3fabab4b4421e0ad2c22dc864f63

  • SSDEEP

    196608:fq/iLRC0OLkYNew6tjCtD2RQVsBp4UAzj:fHC9Lkuew6t2oCO9Azj

Score
7/10

Malware Config

Targets

    • Target

      5e79ed885c85c38dbaa1f38d99d7908523fec6347afa765c5b0964edf6b1bf67

    • Size

      7.5MB

    • MD5

      291a47257db466c1047c2d81b3dfc8e6

    • SHA1

      b2b5439879f807c6bbe77043907f5ff877c73297

    • SHA256

      5e79ed885c85c38dbaa1f38d99d7908523fec6347afa765c5b0964edf6b1bf67

    • SHA512

      37d5fd3e5bfe4f1af55d001fc8e06df7d72308fc3f646ef07a84439bf1454399a08dffadbd55d221c78a605b6b2f09ccb90f3fabab4b4421e0ad2c22dc864f63

    • SSDEEP

      196608:fq/iLRC0OLkYNew6tjCtD2RQVsBp4UAzj:fHC9Lkuew6t2oCO9Azj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks