General

  • Target

    8034b39a0f70c50e5d9d2f70236ca651c2bddbaa1564abd5ff6ee74457d1bea7

  • Size

    7.5MB

  • Sample

    231211-yb9crsfgak

  • MD5

    d626df1c7e21421f30e87a0f2c13d307

  • SHA1

    ee92c15dbbef17545643e69ae7ea17f7c1c84f0d

  • SHA256

    8034b39a0f70c50e5d9d2f70236ca651c2bddbaa1564abd5ff6ee74457d1bea7

  • SHA512

    6d9ffea190d61d306e547d36ab32700330130065f948a2508719398ade1aff410035000e48c5c24cc17acafe9484c201a5cab780261d1386935e72972f8b3276

  • SSDEEP

    196608:epVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:epVBtvpbL/+vVYBrTTefzj

Score
7/10

Malware Config

Targets

    • Target

      8034b39a0f70c50e5d9d2f70236ca651c2bddbaa1564abd5ff6ee74457d1bea7

    • Size

      7.5MB

    • MD5

      d626df1c7e21421f30e87a0f2c13d307

    • SHA1

      ee92c15dbbef17545643e69ae7ea17f7c1c84f0d

    • SHA256

      8034b39a0f70c50e5d9d2f70236ca651c2bddbaa1564abd5ff6ee74457d1bea7

    • SHA512

      6d9ffea190d61d306e547d36ab32700330130065f948a2508719398ade1aff410035000e48c5c24cc17acafe9484c201a5cab780261d1386935e72972f8b3276

    • SSDEEP

      196608:epVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:epVBtvpbL/+vVYBrTTefzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks