General

  • Target

    2041669c537560579e337c7417bfb057cd4584f5a00c8aa3572bcc33768a0214

  • Size

    7.5MB

  • Sample

    231211-zfhahsace9

  • MD5

    1be7af9f67b28c1e31354bf0abc0d8f5

  • SHA1

    7f3f959ddbebc904056e10a103874ed02f5daba6

  • SHA256

    2041669c537560579e337c7417bfb057cd4584f5a00c8aa3572bcc33768a0214

  • SHA512

    4bd4a854785a49156642f79573654b9135df474cb5c4f1dd1c7e7aea5b1c2de1568748909093d70deba05a93cbbfbb8ec0603448cd90f8ddafd26ebfd28f2202

  • SSDEEP

    196608:xpVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:xpVBtvpbL/+vVYBrTTefzj

Score
7/10

Malware Config

Targets

    • Target

      2041669c537560579e337c7417bfb057cd4584f5a00c8aa3572bcc33768a0214

    • Size

      7.5MB

    • MD5

      1be7af9f67b28c1e31354bf0abc0d8f5

    • SHA1

      7f3f959ddbebc904056e10a103874ed02f5daba6

    • SHA256

      2041669c537560579e337c7417bfb057cd4584f5a00c8aa3572bcc33768a0214

    • SHA512

      4bd4a854785a49156642f79573654b9135df474cb5c4f1dd1c7e7aea5b1c2de1568748909093d70deba05a93cbbfbb8ec0603448cd90f8ddafd26ebfd28f2202

    • SSDEEP

      196608:xpVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:xpVBtvpbL/+vVYBrTTefzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks