Overview

overview

7

Static

static

3

winprofile

windows7-x64

7

winprofile

windows10-1703-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3acdfa7827ea8c99b7273e7e8af1f6b26452e84a156792e3effc2685d43a825a

  • Size

    6.3MB

  • Sample

    231231-19vclshfg4

  • MD5

    0e6d686bcd8dae410e35b2a1bea1c6c2

  • SHA1

    6ec3c81300d9c9e3f43363c9587aae0c4a0829bd

  • SHA256

    3acdfa7827ea8c99b7273e7e8af1f6b26452e84a156792e3effc2685d43a825a

  • SHA512

    21b713ed4157030d3a932b74049388176a40c6412732bd3d1d6ffe1a53c8c37bedf5b9e13101b0fe96261dd7cd3c925d20ac1eb431ed97f4d0e7f113738c8047

  • SSDEEP

    196608:QcYrmuXQpE7u6PVly61lVL1gTfuRlE8ko1jndBupNsH4dD:OVhgaRl/1jdBuPdD

Score
7/10
discovery

Malware Config

Targets

    • Target

      3acdfa7827ea8c99b7273e7e8af1f6b26452e84a156792e3effc2685d43a825a

    • Size

      6.3MB

    • MD5

      0e6d686bcd8dae410e35b2a1bea1c6c2

    • SHA1

      6ec3c81300d9c9e3f43363c9587aae0c4a0829bd

    • SHA256

      3acdfa7827ea8c99b7273e7e8af1f6b26452e84a156792e3effc2685d43a825a

    • SHA512

      21b713ed4157030d3a932b74049388176a40c6412732bd3d1d6ffe1a53c8c37bedf5b9e13101b0fe96261dd7cd3c925d20ac1eb431ed97f4d0e7f113738c8047

    • SSDEEP

      196608:QcYrmuXQpE7u6PVly61lVL1gTfuRlE8ko1jndBupNsH4dD:OVhgaRl/1jdBuPdD

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks