General

  • Target
    Malware Samples(2).zip
  • Size 11.3MB
  • Sample200101-1dghyjegsn
  • SHA256 560d99887286ea550542c684b208ab356394e22d45571c64765653543fbf1dd3
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    https://lilikhendarwati.com/wp-admin/JbdTQoQQ/

  • exe.dropper

    http://www.zhangboo.com/wp-admin/lwhcvV/

  • exe.dropper

    http://test.windsorheatingandair.com/wp-includes/r9lv-4teq5ff-8759846140/

  • exe.dropper

    https://www.jackiejill.com/wp-includes/yiqr4r6a-dwt7s0u-26965878/

  • exe.dropper

    http://apolina.pl/engl/1tuh6ul-gakf89-994/

Targets

    • Target
      VTDL32be68dafd336fa9425b3602fbb4e33e.danger
    • Size 127KB
    • SHA256 e6df008a724554e508765cdd7acbf90a55cdc4bfe216661536e10785de45edf4
    • MD5 SHA1 SHA512
    Score
    10/10
    • Process spawned unexpected child process

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks