Overview

overview

7

Static

static

3

1ef8f94340...01.exe

windows7-x64

7

1ef8f94340...01.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1ef8f9434013d1d2d3fae8b6a4c83f3dcb3ce47ee1351db02b5b3718086b8501

  • Size

    7.4MB

  • Sample

    231212-jrkxsaafg8

  • MD5

    1af2168fb493c7994b40fa3cc0281dfa

  • SHA1

    62bea2805124448056d0d8b517fff8cddaf52b57

  • SHA256

    a7d37d9e11d16ccdde408b89521013d05c97ba12789f31bc981d2d37c6083c2d

  • SHA512

    368fea67c30e67b8c2078e1260df911a7100531069959db88a6d0673640d31a4d4bc900e1d30e0495825f85b1b8ecdcb7b50fbaa5abd1fcd8f2a5701a58c4352

  • SSDEEP

    196608:dgse/Ct50YQfkYZwww/jKFPOLmnY7tYiWXe:dPz0lfkmwww/WUGMpWXe

Score
7/10
discovery

Malware Config

Targets

    • Target

      1ef8f9434013d1d2d3fae8b6a4c83f3dcb3ce47ee1351db02b5b3718086b8501

    • Size

      7.5MB

    • MD5

      0a8ebedefdff22ca7016d0c4adb6f428

    • SHA1

      06cf12679a98ebd12dd220c107e97593ea299a20

    • SHA256

      1ef8f9434013d1d2d3fae8b6a4c83f3dcb3ce47ee1351db02b5b3718086b8501

    • SHA512

      18c379fca2a68a759849c94fc3e1a3498a85d74701d8fe173a85c67d399de68e47092c1944797341869b6afbfb7bf393f0aa4fc48774d9b1fd27d7bdb43d4a7f

    • SSDEEP

      196608:zq/iLRC0OLkYNew6tjCtD2RQVsBp4UAzj:zHC9Lkuew6t2oCO9Azj

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks