General

  • Target

    9af8d5d0eca8e46b3d2c3bac8bfe7e46

  • Size

    37KB

  • Sample

    240214-g1pk8abc3s

  • MD5

    9af8d5d0eca8e46b3d2c3bac8bfe7e46

  • SHA1

    7ef811ae3c973f9dd2fd3751e926374cd54bfb56

  • SHA256

    c18ff5f29f3ca46c4aa53d56cddc4bcf2854529c24f06356476379881b3a97e3

  • SHA512

    9012a3d1a9d221fc2adaf6088745e1509d5a78c3b86b8ef93f5415cdd267a3726c1a61d85cfb1182abc8ec593cfd1d0c3e7c9b290782a420bb961cde20ade8b1

  • SSDEEP

    768:C42I2yadMFCI342H0QNzR8AvNL9U8C4jhB1IgyleJ7mSwlNLjvLOwvf/8WKNQdl:YgCIxUQtR8+NL9U8JjpyY1mfjjvLfMWF

Score
7/10

Malware Config

Targets

    • Target

      9af8d5d0eca8e46b3d2c3bac8bfe7e46

    • Size

      37KB

    • MD5

      9af8d5d0eca8e46b3d2c3bac8bfe7e46

    • SHA1

      7ef811ae3c973f9dd2fd3751e926374cd54bfb56

    • SHA256

      c18ff5f29f3ca46c4aa53d56cddc4bcf2854529c24f06356476379881b3a97e3

    • SHA512

      9012a3d1a9d221fc2adaf6088745e1509d5a78c3b86b8ef93f5415cdd267a3726c1a61d85cfb1182abc8ec593cfd1d0c3e7c9b290782a420bb961cde20ade8b1

    • SSDEEP

      768:C42I2yadMFCI342H0QNzR8AvNL9U8C4jhB1IgyleJ7mSwlNLjvLOwvf/8WKNQdl:YgCIxUQtR8+NL9U8JjpyY1mfjjvLfMWF

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks