General

  • Target

    b414fc15a7952378d73a13f3befd992e6483e0b1f114bbab617bf80deab85501

  • Size

    7.2MB

  • Sample

    231212-pegx9acfhl

  • MD5

    64e5b2788c31116f8b0bae7bc5aae237

  • SHA1

    5860f343c2579a25fb03aab463d4209a2c2068e0

  • SHA256

    b414fc15a7952378d73a13f3befd992e6483e0b1f114bbab617bf80deab85501

  • SHA512

    3d914cce5d8ed12d9bc81af148923877b8f5384ba717844c9a003e1e284c1a2ffdf9ab635160052fe85567c9f628a9e57666c067b20507b2cec814c71b082195

  • SSDEEP

    196608:Xxm5vSfkhLnRaUXNvQKOmYuX5ORBs2J32NS8Pu2XYeWs8hckg7inWzj:iSfs8WIKOluX+stSCvR9L9GnWzj

Score
7/10

Malware Config

Targets

    • Target

      b414fc15a7952378d73a13f3befd992e6483e0b1f114bbab617bf80deab85501

    • Size

      7.2MB

    • MD5

      64e5b2788c31116f8b0bae7bc5aae237

    • SHA1

      5860f343c2579a25fb03aab463d4209a2c2068e0

    • SHA256

      b414fc15a7952378d73a13f3befd992e6483e0b1f114bbab617bf80deab85501

    • SHA512

      3d914cce5d8ed12d9bc81af148923877b8f5384ba717844c9a003e1e284c1a2ffdf9ab635160052fe85567c9f628a9e57666c067b20507b2cec814c71b082195

    • SSDEEP

      196608:Xxm5vSfkhLnRaUXNvQKOmYuX5ORBs2J32NS8Pu2XYeWs8hckg7inWzj:iSfs8WIKOluX+stSCvR9L9GnWzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks