General

  • Target

    4685f8d5657b2f28084505dd973444c7e2328dda8fe6aaa29244f3bc05e63e56

  • Size

    7.6MB

  • Sample

    231211-yc3llsfgbm

  • MD5

    0f57a2fb620c3874a14b506c89c9e000

  • SHA1

    c8884c287d341e7310179e841642c822f526a136

  • SHA256

    4685f8d5657b2f28084505dd973444c7e2328dda8fe6aaa29244f3bc05e63e56

  • SHA512

    9bfb8f658d45ab8d487c2ee9943a3984d541bf6d6f5d7ab427f57b559918e8bab974b83ffeb2a324d2a99538665648e704098a9e2c2261f5e12f1ddd88ff83b0

  • SSDEEP

    196608:KnnY8NWvGpWTTlm0OxwW+nFnfZsMUdFt30Dzj:KnnY8NELTIrxwlxQWDzj

Score
7/10

Malware Config

Targets

    • Target

      4685f8d5657b2f28084505dd973444c7e2328dda8fe6aaa29244f3bc05e63e56

    • Size

      7.6MB

    • MD5

      0f57a2fb620c3874a14b506c89c9e000

    • SHA1

      c8884c287d341e7310179e841642c822f526a136

    • SHA256

      4685f8d5657b2f28084505dd973444c7e2328dda8fe6aaa29244f3bc05e63e56

    • SHA512

      9bfb8f658d45ab8d487c2ee9943a3984d541bf6d6f5d7ab427f57b559918e8bab974b83ffeb2a324d2a99538665648e704098a9e2c2261f5e12f1ddd88ff83b0

    • SSDEEP

      196608:KnnY8NWvGpWTTlm0OxwW+nFnfZsMUdFt30Dzj:KnnY8NELTIrxwlxQWDzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks