Overview

overview

7

Static

static

3

6d495e0fe8...7f.exe

windows7-x64

7

6d495e0fe8...7f.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    17df5283b191f64880c1c9e63dbd788c.bin

  • Size

    6.9MB

  • Sample

    231212-brdvgaceck

  • MD5

    8d2c6df02044e6dc0b701b2a436b3805

  • SHA1

    6ac3397c8467d12238c42a650cc9949a31a1e0f6

  • SHA256

    6a624751a5c622b3d4e2b5d0ae6e7da9810db3cf6dd1fc9108d797a6724350c9

  • SHA512

    ef8b71c239924ba12cb251162eb981b1be65a9c984145ebab55c4359afa65f798d847b4812d7cd9966ff4fe44084559049b58c502f023a6e67f108ca69147d4d

  • SSDEEP

    196608:pPBKBUWOAAqN9+U2QYmn+EuCwDOR+dh7TB6gDJ4f5KSoCJrl82Vcp5Rc:pWUWXAq+Up9+E2dJB6gl4wKplkHRc

Score
7/10
discovery

Malware Config

Targets

    • Target

      6d495e0fe82c1762b27fb53217d1de649cd999f4b596a868e1a237d0abd6f97f.exe

    • Size

      6.9MB

    • MD5

      17df5283b191f64880c1c9e63dbd788c

    • SHA1

      f984debb96c584b227227436f03ec602258af50a

    • SHA256

      6d495e0fe82c1762b27fb53217d1de649cd999f4b596a868e1a237d0abd6f97f

    • SHA512

      519b2100a10aa30d6d57e5391b668fcb98c3cdc965fed1b03d0c3db86aec0e1e2bd7b3f17dfe08b2d5e759fc5a7fdfe152145ac788d4af5a675269cb4e446967

    • SSDEEP

      196608:pSnj/mmV+GsH+bNueuJRAZVAOk5Vvz+tqE9AmEkzj:pSjumV+jHUodIjk5VzfE9Awzj

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks