General

  • Target

    51c1db80e21059cffa913be9036be7f2fcced009dac34d429d308064659669e2

  • Size

    203KB

  • Sample

    191220-a3w4k8srkx

  • MD5

    7bd22545350df7bbc2fc0b7b67659063

  • SHA1

    8fb3bb6c87b954266bb885da76814824bfa2708c

  • SHA256

    51c1db80e21059cffa913be9036be7f2fcced009dac34d429d308064659669e2

  • SHA512

    24d2aa2d9da3241db1ac7486ee94fbd9f7fb430028b138d8a40f37e54877cad6df7e4756c81909f6b548f46a7b277bf2cf5792d331dbee7bdb5cf88d61170ee6

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://www.wangjy1211.xyz/wp-includes/bmzb-f0vjim4w-5277909/

exe.dropper

https://www.compelconsultancy.com/2ic0/lNeMPamsg/

exe.dropper

http://www.acgvideo.co/cache/rzvKsqUX/

exe.dropper

http://www.smdelectro.com/alfacgiapi/fkq-lke7btj-80091/

exe.dropper

https://www.air-pegasus.com/sips/ADcnKLXD/

Targets

    • Target

      51c1db80e21059cffa913be9036be7f2fcced009dac34d429d308064659669e2

    • Size

      203KB

    • MD5

      7bd22545350df7bbc2fc0b7b67659063

    • SHA1

      8fb3bb6c87b954266bb885da76814824bfa2708c

    • SHA256

      51c1db80e21059cffa913be9036be7f2fcced009dac34d429d308064659669e2

    • SHA512

      24d2aa2d9da3241db1ac7486ee94fbd9f7fb430028b138d8a40f37e54877cad6df7e4756c81909f6b548f46a7b277bf2cf5792d331dbee7bdb5cf88d61170ee6

    Score
    10/10
    • Process spawned unexpected child process

MITRE ATT&CK Enterprise v6

Tasks