General

  • Target

    717d3b1bb637dc0f04fae941e313b27bcf15036facce6006e873c0252ff90465

  • Size

    7.2MB

  • Sample

    231212-relybaebbm

  • MD5

    21783e1560e9fb8f694b079586d08dba

  • SHA1

    30d78c2639bcbb07791f3b7e930f840459893c19

  • SHA256

    717d3b1bb637dc0f04fae941e313b27bcf15036facce6006e873c0252ff90465

  • SHA512

    27fa5710ff6da243c56b5078830e57b00ae5aba7819fdc0c504dd25e2b341fb25dbb92c5090aa59a75ee56ebf1f99dbb17c82429d545591c74e2f586142ea10e

  • SSDEEP

    196608:txm50EF70ZaWLZ97vnC8LpS7+bI9cpSzj:LEt0Zak7aIA7kSzj

Score
7/10

Malware Config

Targets

    • Target

      717d3b1bb637dc0f04fae941e313b27bcf15036facce6006e873c0252ff90465

    • Size

      7.2MB

    • MD5

      21783e1560e9fb8f694b079586d08dba

    • SHA1

      30d78c2639bcbb07791f3b7e930f840459893c19

    • SHA256

      717d3b1bb637dc0f04fae941e313b27bcf15036facce6006e873c0252ff90465

    • SHA512

      27fa5710ff6da243c56b5078830e57b00ae5aba7819fdc0c504dd25e2b341fb25dbb92c5090aa59a75ee56ebf1f99dbb17c82429d545591c74e2f586142ea10e

    • SSDEEP

      196608:txm50EF70ZaWLZ97vnC8LpS7+bI9cpSzj:LEt0Zak7aIA7kSzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks