General

  • Target

    527717ab0b5f5094692003785b80b469f5bc993bcda02c3cdada59f4e56ed4c0

  • Size

    7.7MB

  • Sample

    231212-jbsmpaghfq

  • MD5

    8b28c9e20936457e34ea7297fe589a11

  • SHA1

    21bb712d2dbc82e4d6d7ddef421ed83718e3ee17

  • SHA256

    527717ab0b5f5094692003785b80b469f5bc993bcda02c3cdada59f4e56ed4c0

  • SHA512

    48741d765a077304c302654930327db232006de3a611f65d689fc8b69e79d261393791a56e13ff8be4fc8e5e6494077ee95e234c286457790258d6bff6ebff57

  • SSDEEP

    196608:Txm5ZY+LWEHHi/a055Uu5gLAj1DMWIuxurIfDnzj:iYKWEUl5JiAj1DMqumjzj

Score
7/10

Malware Config

Targets

    • Target

      527717ab0b5f5094692003785b80b469f5bc993bcda02c3cdada59f4e56ed4c0

    • Size

      7.7MB

    • MD5

      8b28c9e20936457e34ea7297fe589a11

    • SHA1

      21bb712d2dbc82e4d6d7ddef421ed83718e3ee17

    • SHA256

      527717ab0b5f5094692003785b80b469f5bc993bcda02c3cdada59f4e56ed4c0

    • SHA512

      48741d765a077304c302654930327db232006de3a611f65d689fc8b69e79d261393791a56e13ff8be4fc8e5e6494077ee95e234c286457790258d6bff6ebff57

    • SSDEEP

      196608:Txm5ZY+LWEHHi/a055Uu5gLAj1DMWIuxurIfDnzj:iYKWEUl5JiAj1DMqumjzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks