0966ea4fbd9a736b3e378bc0139326765e5a086055c18b00f837bafd384f74e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

424dc14f2afdee44a3c3760e15eeafa0N.exe
Size

321KB
Sample

240803-dykmps1grp
MD5

424dc14f2afdee44a3c3760e15eeafa0
SHA1

1973bd623828336882eecd9d0ef6ed2d4e2c5fa2
SHA256

0966ea4fbd9a736b3e378bc0139326765e5a086055c18b00f837bafd384f74e4
SHA512

9c59dfcd88ab3171340c958d24d57b4a42a888346edaeea613de36f0311c08033c9900fd2d6e75012d9e89b7754108bf6f63749eb919ba7046b4ccc27e56f3a1
SSDEEP

3072:gfKPw/6Nb8l6tYpDzo83H6JrgboTlyMvXOqms0itTBf28VeT:IKP9NC6t8zErgsTlXvXBmJitTBe8Vk

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  424dc14f2afdee44a3c3760e15eeafa0N.exe
- Size
  
  321KB
- MD5
  
  424dc14f2afdee44a3c3760e15eeafa0
- SHA1
  
  1973bd623828336882eecd9d0ef6ed2d4e2c5fa2
- SHA256
  
  0966ea4fbd9a736b3e378bc0139326765e5a086055c18b00f837bafd384f74e4
- SHA512
  
  9c59dfcd88ab3171340c958d24d57b4a42a888346edaeea613de36f0311c08033c9900fd2d6e75012d9e89b7754108bf6f63749eb919ba7046b4ccc27e56f3a1
- SSDEEP
  
  3072:gfKPw/6Nb8l6tYpDzo83H6JrgboTlyMvXOqms0itTBf28VeT:IKP9NC6t8zErgsTlXvXBmJitTBe8Vk
Score

7^/10

discovery
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2