General

  • Target

    ultraddos.exe

  • Size

    12.5MB

  • Sample

    240616-ajvmksvcrq

  • MD5

    9d847ce73c7b1392348732f66790dc28

  • SHA1

    1c3de96158925d938aabb6b0098f9db260895a3f

  • SHA256

    5a000dfadc5854935e75024fc35aeaa461d8f9ac997730310fe19638006745ac

  • SHA512

    66e5d505ac87ca9c3fe14efbd8ca3c68ae4893afc8ef53a261d4246ebe9b28129e8691800bca8df9a5416c80ac2aac1086be2e328e690848676fb87c27f3d44d

  • SSDEEP

    393216:JU9lz21WCx1InEroXgfEqirRRo5tN3ZWU03xToggqiD+iU4:+C1Vx+ErUswvstN37+gqc93

Malware Config

Targets

    • Target

      ultraddos.exe

    • Size

      12.5MB

    • MD5

      9d847ce73c7b1392348732f66790dc28

    • SHA1

      1c3de96158925d938aabb6b0098f9db260895a3f

    • SHA256

      5a000dfadc5854935e75024fc35aeaa461d8f9ac997730310fe19638006745ac

    • SHA512

      66e5d505ac87ca9c3fe14efbd8ca3c68ae4893afc8ef53a261d4246ebe9b28129e8691800bca8df9a5416c80ac2aac1086be2e328e690848676fb87c27f3d44d

    • SSDEEP

      393216:JU9lz21WCx1InEroXgfEqirRRo5tN3ZWU03xToggqiD+iU4:+C1Vx+ErUswvstN37+gqc93

    Score
    9/10
    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

MITRE ATT&CK Enterprise v15

Tasks