General

  • Target

    b0fa63a9bbeb88dcd365812aeb09cec3d7966156391b95215dcb647833faaae6

  • Size

    7.7MB

  • Sample

    231212-j3valahefm

  • MD5

    c9e90a5a588eae3aff68bd5494d3133b

  • SHA1

    75a8dd87bb72f61ad3e0c1b7330cd2b1d6a01279

  • SHA256

    b0fa63a9bbeb88dcd365812aeb09cec3d7966156391b95215dcb647833faaae6

  • SHA512

    6d2b964425aea8e6c7e9257cc2cbf03c4acd70789d82075eb320727143a4c688a4491e9659b62fd1b050f8f9b15bcd9663e48740e8326207a3ad4e0607f38328

  • SSDEEP

    196608:yxm5OiKmWpAKOF9s8l+VpNoy9rYM0eaOsRzj:WiKmOvOXs8gXTkj3Oazj

Score
7/10

Malware Config

Targets

    • Target

      b0fa63a9bbeb88dcd365812aeb09cec3d7966156391b95215dcb647833faaae6

    • Size

      7.7MB

    • MD5

      c9e90a5a588eae3aff68bd5494d3133b

    • SHA1

      75a8dd87bb72f61ad3e0c1b7330cd2b1d6a01279

    • SHA256

      b0fa63a9bbeb88dcd365812aeb09cec3d7966156391b95215dcb647833faaae6

    • SHA512

      6d2b964425aea8e6c7e9257cc2cbf03c4acd70789d82075eb320727143a4c688a4491e9659b62fd1b050f8f9b15bcd9663e48740e8326207a3ad4e0607f38328

    • SSDEEP

      196608:yxm5OiKmWpAKOF9s8l+VpNoy9rYM0eaOsRzj:WiKmOvOXs8gXTkj3Oazj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks