General

  • Target

    839f3d27d35ef395d53d0b24909a4dd154afeb365c90ffb92c733dc1f93c74a9

  • Size

    7.2MB

  • Sample

    231212-rtlabsedgn

  • MD5

    02aeaaebdc32475300c604c55fb23418

  • SHA1

    521bf9b722736e0e8d2b4f656c29ac28065b9051

  • SHA256

    839f3d27d35ef395d53d0b24909a4dd154afeb365c90ffb92c733dc1f93c74a9

  • SHA512

    74613394d330b9ed1e605a0ba336d60f51fa7fe1c35a3a1e1faaedc37e81c5fe1c4d20242e9333d1daefc914dba549293dc7bce884fc5a022660aea02ee85f4e

  • SSDEEP

    196608:1xm50EF70ZaWLZ97vnC8LpS7+bI9cpSzj:jEt0Zak7aIA7kSzj

Score
7/10

Malware Config

Targets

    • Target

      839f3d27d35ef395d53d0b24909a4dd154afeb365c90ffb92c733dc1f93c74a9

    • Size

      7.2MB

    • MD5

      02aeaaebdc32475300c604c55fb23418

    • SHA1

      521bf9b722736e0e8d2b4f656c29ac28065b9051

    • SHA256

      839f3d27d35ef395d53d0b24909a4dd154afeb365c90ffb92c733dc1f93c74a9

    • SHA512

      74613394d330b9ed1e605a0ba336d60f51fa7fe1c35a3a1e1faaedc37e81c5fe1c4d20242e9333d1daefc914dba549293dc7bce884fc5a022660aea02ee85f4e

    • SSDEEP

      196608:1xm50EF70ZaWLZ97vnC8LpS7+bI9cpSzj:jEt0Zak7aIA7kSzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks