General

  • Target

    1e01065f59e585f99d73e0fe913def9d536258c4a12f9f35b7c3066532bff314

  • Size

    7.5MB

  • Sample

    231212-bwl2msdhf7

  • MD5

    97ad9f62b7f518a7ff3bca66de7519d8

  • SHA1

    5eb668de94621bc5e828af37baf6b37ef43990d2

  • SHA256

    1e01065f59e585f99d73e0fe913def9d536258c4a12f9f35b7c3066532bff314

  • SHA512

    36ac4a34b3e06b33b48a7af738e2e497fa12cef13dba3c2cacef3538acf7543a47d7ac230a346c34041750a4581b5b0e4dce283e8258dabd45ece1746c7adfe8

  • SSDEEP

    196608:lpVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:lpVBtvpbL/+vVYBrTTefzj

Score
7/10

Malware Config

Targets

    • Target

      1e01065f59e585f99d73e0fe913def9d536258c4a12f9f35b7c3066532bff314

    • Size

      7.5MB

    • MD5

      97ad9f62b7f518a7ff3bca66de7519d8

    • SHA1

      5eb668de94621bc5e828af37baf6b37ef43990d2

    • SHA256

      1e01065f59e585f99d73e0fe913def9d536258c4a12f9f35b7c3066532bff314

    • SHA512

      36ac4a34b3e06b33b48a7af738e2e497fa12cef13dba3c2cacef3538acf7543a47d7ac230a346c34041750a4581b5b0e4dce283e8258dabd45ece1746c7adfe8

    • SSDEEP

      196608:lpVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:lpVBtvpbL/+vVYBrTTefzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks