General

  • Target

    d00df97ec1e9affea7eee45477979f8b128414ac6f7ebbb417af180e1dc41826

  • Size

    7.5MB

  • Sample

    231211-xn6lzagda7

  • MD5

    bc1e6b4975a498a272e3816463f7e4ed

  • SHA1

    f851482419821fa5bb21a3618211be83895f3afa

  • SHA256

    d00df97ec1e9affea7eee45477979f8b128414ac6f7ebbb417af180e1dc41826

  • SHA512

    2b3e1c3e3de2a183beeb2ad5e566deab510ed32b87c11321bc7839baf73db7f11e485fbc28241e5197a3a2b5a6c8e3d0c2c6af66934d4ff3a33774b4bbfca3ae

  • SSDEEP

    196608:LWc5A2XV/1qTZGgnkphp0rAwZYGespRHDfY5cdV4qCzj:DDFyOTpBsLp1c5SV4qCzj

Score
7/10

Malware Config

Targets

    • Target

      d00df97ec1e9affea7eee45477979f8b128414ac6f7ebbb417af180e1dc41826

    • Size

      7.5MB

    • MD5

      bc1e6b4975a498a272e3816463f7e4ed

    • SHA1

      f851482419821fa5bb21a3618211be83895f3afa

    • SHA256

      d00df97ec1e9affea7eee45477979f8b128414ac6f7ebbb417af180e1dc41826

    • SHA512

      2b3e1c3e3de2a183beeb2ad5e566deab510ed32b87c11321bc7839baf73db7f11e485fbc28241e5197a3a2b5a6c8e3d0c2c6af66934d4ff3a33774b4bbfca3ae

    • SSDEEP

      196608:LWc5A2XV/1qTZGgnkphp0rAwZYGespRHDfY5cdV4qCzj:DDFyOTpBsLp1c5SV4qCzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks