General

  • Target

    11c00639d6f13c6eb409bd2de7f6ecf562e75580646dd11189417faa3500bcab

  • Size

    7.6MB

  • Sample

    231211-ysgn3sgbhk

  • MD5

    f6d91bf7ed73bf89fdd6fffe0c8f4c30

  • SHA1

    8f5f82b95bdef68114a48596968a883202fc8804

  • SHA256

    11c00639d6f13c6eb409bd2de7f6ecf562e75580646dd11189417faa3500bcab

  • SHA512

    d43a03226c3a6bc538ef9f05ebc92fd742fe67eceab1fc17289cea9210ced16343193d43ccb48f8f5e0ae7b959e55698571fdc998369d7e481d65cc7d8f15db9

  • SSDEEP

    196608:KnnY8NWvGpWTTlm0OxwW+nFnfZsMUdFt30Dzj:KnnY8NELTIrxwlxQWDzj

Score
7/10

Malware Config

Targets

    • Target

      11c00639d6f13c6eb409bd2de7f6ecf562e75580646dd11189417faa3500bcab

    • Size

      7.6MB

    • MD5

      f6d91bf7ed73bf89fdd6fffe0c8f4c30

    • SHA1

      8f5f82b95bdef68114a48596968a883202fc8804

    • SHA256

      11c00639d6f13c6eb409bd2de7f6ecf562e75580646dd11189417faa3500bcab

    • SHA512

      d43a03226c3a6bc538ef9f05ebc92fd742fe67eceab1fc17289cea9210ced16343193d43ccb48f8f5e0ae7b959e55698571fdc998369d7e481d65cc7d8f15db9

    • SSDEEP

      196608:KnnY8NWvGpWTTlm0OxwW+nFnfZsMUdFt30Dzj:KnnY8NELTIrxwlxQWDzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks