General

  • Target

    888a6cb0b6bc30b84f2ccfa45fa2542e0d1a67b93e943fae87e956a482dd76df

  • Size

    7.0MB

  • Sample

    231212-tg1wcshed8

  • MD5

    405808b3497f5e915cc9fdf7b74e3bf4

  • SHA1

    49bdb03e3738f7a18edb857ff46da7ed9bc287d9

  • SHA256

    888a6cb0b6bc30b84f2ccfa45fa2542e0d1a67b93e943fae87e956a482dd76df

  • SHA512

    52934cc7ba763a137784b42beba483b19d27dddd72d66583d4fdd15eea723078e1f91b9c575365fd32bfba5c283b5cdafe1906d7e8605c1ba19f4667fa786681

  • SSDEEP

    196608:txm5Z7xPjWtYOkdHWd1V3GaO4TwWHvzASW8P7Bzj:C7RjWtfj95dLASWyzj

Score
7/10

Malware Config

Targets

    • Target

      888a6cb0b6bc30b84f2ccfa45fa2542e0d1a67b93e943fae87e956a482dd76df

    • Size

      7.0MB

    • MD5

      405808b3497f5e915cc9fdf7b74e3bf4

    • SHA1

      49bdb03e3738f7a18edb857ff46da7ed9bc287d9

    • SHA256

      888a6cb0b6bc30b84f2ccfa45fa2542e0d1a67b93e943fae87e956a482dd76df

    • SHA512

      52934cc7ba763a137784b42beba483b19d27dddd72d66583d4fdd15eea723078e1f91b9c575365fd32bfba5c283b5cdafe1906d7e8605c1ba19f4667fa786681

    • SSDEEP

      196608:txm5Z7xPjWtYOkdHWd1V3GaO4TwWHvzASW8P7Bzj:C7RjWtfj95dLASWyzj

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks