General

  • Target
    8b709d68d187d489af3262bda46351ba4022c77b3f8f51a68fb240e954b6cadf
  • Size 2.4MB
  • Sample260421-lyklpscv5m
  • SHA256 8b709d68d187d489af3262bda46351ba4022c77b3f8f51a68fb240e954b6cadf
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      8b709d68d187d489af3262bda46351ba4022c77b3f8f51a68fb240e954b6cadf
    • Size 2.4MB
    • SHA256 8b709d68d187d489af3262bda46351ba4022c77b3f8f51a68fb240e954b6cadf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks