Resubmissions

30/12/2023, 20:45

231230-zjx55sfahl 7

30/12/2023, 17:19

231230-vvy5csahgq 7

General

  • Target

    9dd0d2bfb00da2ef8e4a59eba2916cb3208a352f667e7d550a2ba5d5434c4704.exe

  • Size

    4.7MB

  • Sample

    231230-vvy5csahgq

  • MD5

    d7c03b4c1d8aa7d0877d39a3f78a2287

  • SHA1

    ad15ba77adcac76068169928cfcaed0e6a240274

  • SHA256

    9dd0d2bfb00da2ef8e4a59eba2916cb3208a352f667e7d550a2ba5d5434c4704

  • SHA512

    38569ff62e692ee738e126c5c7274861f8bef99c15b33470c6dff27e9315d412f91e6dc5527174d8fd1d309e31bfb0debb1b3b3e3aff79b180df5f5e50db20da

  • SSDEEP

    98304:QIxLo8RFyYCTihNgBFyMb+WVEIk9YDdyax9eW7ofMrBtmF+Vi/qeae4dm8:zxLv3vhNMyq+AzyaxXofWswVk9ae4dD

Score
7/10

Malware Config

Targets

    • Target

      9dd0d2bfb00da2ef8e4a59eba2916cb3208a352f667e7d550a2ba5d5434c4704.exe

    • Size

      4.7MB

    • MD5

      d7c03b4c1d8aa7d0877d39a3f78a2287

    • SHA1

      ad15ba77adcac76068169928cfcaed0e6a240274

    • SHA256

      9dd0d2bfb00da2ef8e4a59eba2916cb3208a352f667e7d550a2ba5d5434c4704

    • SHA512

      38569ff62e692ee738e126c5c7274861f8bef99c15b33470c6dff27e9315d412f91e6dc5527174d8fd1d309e31bfb0debb1b3b3e3aff79b180df5f5e50db20da

    • SSDEEP

      98304:QIxLo8RFyYCTihNgBFyMb+WVEIk9YDdyax9eW7ofMrBtmF+Vi/qeae4dm8:zxLv3vhNMyq+AzyaxXofWswVk9ae4dD

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks