General

  • Target

    5afeb5ebed3ea2f5a976fb82792084f99dc558096e89109f4dcb45192a1d86ed

  • Size

    547KB

  • Sample

    250702-x16shagj4w

  • MD5

    a3f688d3f2c20c34d1e142e53a4132f2

  • SHA1

    8e45b6d81671c40a8dab5c555c81607088c49324

  • SHA256

    5afeb5ebed3ea2f5a976fb82792084f99dc558096e89109f4dcb45192a1d86ed

  • SHA512

    d8870763e5d6fc7445d52540276a27e7eb1dc8afaa5f4ddd6ad578f796ce954eebcb31ffed00e980da95d38854351ddb28856ef816c495ba1484ea27e3dbd890

  • SSDEEP

    6144:5cTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KARG3:5SvO2x9mONvKRILSFnOkx2LIaxy6RY

Score
7/10

Malware Config

Targets

    • Target

      5afeb5ebed3ea2f5a976fb82792084f99dc558096e89109f4dcb45192a1d86ed

    • Size

      547KB

    • MD5

      a3f688d3f2c20c34d1e142e53a4132f2

    • SHA1

      8e45b6d81671c40a8dab5c555c81607088c49324

    • SHA256

      5afeb5ebed3ea2f5a976fb82792084f99dc558096e89109f4dcb45192a1d86ed

    • SHA512

      d8870763e5d6fc7445d52540276a27e7eb1dc8afaa5f4ddd6ad578f796ce954eebcb31ffed00e980da95d38854351ddb28856ef816c495ba1484ea27e3dbd890

    • SSDEEP

      6144:5cTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KARG3:5SvO2x9mONvKRILSFnOkx2LIaxy6RY

    Score
    7/10
    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks