General

  • Target

    db3002bafbd859e3589e45f2cebf63a7f840f5d27708f43c4885c4a4b6c5ff8d

  • Size

    7.2MB

  • Sample

    231212-l66h5scfd5

  • MD5

    c2e7581309233bb25f100355a2dece84

  • SHA1

    8f648eaa57bcf86352d7cfa521e5deb478457d34

  • SHA256

    db3002bafbd859e3589e45f2cebf63a7f840f5d27708f43c4885c4a4b6c5ff8d

  • SHA512

    996aacd82c59fd83a8e73511d0f91c14d6fa4ac76f2d285d2c632155350980101311d51b531707ea56dd5d034dda4d070d1e82e82970a8939af2423c2a42fdea

  • SSDEEP

    196608:Sxm5xCJOyhaLRyatbRgZIWFhoPd9qRvnTyGofmyq1zj:pcOycyKbf6i+E+P1zj

Score
7/10

Malware Config

Targets

    • Target

      db3002bafbd859e3589e45f2cebf63a7f840f5d27708f43c4885c4a4b6c5ff8d

    • Size

      7.2MB

    • MD5

      c2e7581309233bb25f100355a2dece84

    • SHA1

      8f648eaa57bcf86352d7cfa521e5deb478457d34

    • SHA256

      db3002bafbd859e3589e45f2cebf63a7f840f5d27708f43c4885c4a4b6c5ff8d

    • SHA512

      996aacd82c59fd83a8e73511d0f91c14d6fa4ac76f2d285d2c632155350980101311d51b531707ea56dd5d034dda4d070d1e82e82970a8939af2423c2a42fdea

    • SSDEEP

      196608:Sxm5xCJOyhaLRyatbRgZIWFhoPd9qRvnTyGofmyq1zj:pcOycyKbf6i+E+P1zj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks