General

  • Target

    326d297b441a40bb3f53bb55cb727e0fbed422470977ca167b1c919029be746b

  • Size

    56KB

  • Sample

    240115-detq9sgadq

  • MD5

    87fa996ef9ab77cad2f9d3375991ea42

  • SHA1

    211d579c8a15b1a5cda6bc39d15fbb2ecaacff5b

  • SHA256

    326d297b441a40bb3f53bb55cb727e0fbed422470977ca167b1c919029be746b

  • SHA512

    7d430893fca93b6f0226e115e5609058582fafcb3a2a4343772faeb4a89a743b9dfe9b9ad850dfd3a17e7b79c6bbe8d7b5ec5fcc492bf88ab98d3a1d5c2191d9

  • SSDEEP

    768:SiC/DyfvDF9+N127zub7+IJSuCMajTiAmPbjQLnhs1mD2B2Dy:NC/DivXROJSuwjFmz0Lnhs152G

Score
9/10

Malware Config

Targets

    • Target

      326d297b441a40bb3f53bb55cb727e0fbed422470977ca167b1c919029be746b

    • Size

      56KB

    • MD5

      87fa996ef9ab77cad2f9d3375991ea42

    • SHA1

      211d579c8a15b1a5cda6bc39d15fbb2ecaacff5b

    • SHA256

      326d297b441a40bb3f53bb55cb727e0fbed422470977ca167b1c919029be746b

    • SHA512

      7d430893fca93b6f0226e115e5609058582fafcb3a2a4343772faeb4a89a743b9dfe9b9ad850dfd3a17e7b79c6bbe8d7b5ec5fcc492bf88ab98d3a1d5c2191d9

    • SSDEEP

      768:SiC/DyfvDF9+N127zub7+IJSuCMajTiAmPbjQLnhs1mD2B2Dy:NC/DivXROJSuwjFmz0Lnhs152G

    Score
    9/10
    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Blocklisted process makes network request

    • Deletes itself

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks