General

  • Target
    f85ef262022a4bbde8a47dc38ee1bb8ba669ab6f8d3ec65e36c72a4b6be3b503
  • Size 374KB
  • Sample260730-yd78gswelb
  • SHA256 f85ef262022a4bbde8a47dc38ee1bb8ba669ab6f8d3ec65e36c72a4b6be3b503
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      f85ef262022a4bbde8a47dc38ee1bb8ba669ab6f8d3ec65e36c72a4b6be3b503
    • Size 374KB
    • SHA256 f85ef262022a4bbde8a47dc38ee1bb8ba669ab6f8d3ec65e36c72a4b6be3b503
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks