General

  • Target

    01a2f0c7140efc8477974b68a3f8be5a04260a205382469ccab93b81802af895

  • Size

    7.2MB

  • Sample

    231212-r9y65aeghk

  • MD5

    d42c3904c1b22bc42771c1a2616610b8

  • SHA1

    0b08cba49fc1720c0925adefafe33ab3b06e1a76

  • SHA256

    01a2f0c7140efc8477974b68a3f8be5a04260a205382469ccab93b81802af895

  • SHA512

    bbe0bbbcb7731d7279baabd2ee9d819bfde55bd4baa34d5ca6259915d99266fe21cfd5b68ceb930c929158bac0ad7aef27560ba5ae3ea117ba0cad79ef50c6ff

  • SSDEEP

    196608:kxm50EF70ZaWLZ97vnC8LpS7+bI9cpSzj:uEt0Zak7aIA7kSzj

Score
7/10

Malware Config

Targets

    • Target

      01a2f0c7140efc8477974b68a3f8be5a04260a205382469ccab93b81802af895

    • Size

      7.2MB

    • MD5

      d42c3904c1b22bc42771c1a2616610b8

    • SHA1

      0b08cba49fc1720c0925adefafe33ab3b06e1a76

    • SHA256

      01a2f0c7140efc8477974b68a3f8be5a04260a205382469ccab93b81802af895

    • SHA512

      bbe0bbbcb7731d7279baabd2ee9d819bfde55bd4baa34d5ca6259915d99266fe21cfd5b68ceb930c929158bac0ad7aef27560ba5ae3ea117ba0cad79ef50c6ff

    • SSDEEP

      196608:kxm50EF70ZaWLZ97vnC8LpS7+bI9cpSzj:uEt0Zak7aIA7kSzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks