General

  • Target

    1d3a840ff6bbb5f943f5636a8a908fc9208dca41bf2c719ed677db9881dedea3

  • Size

    246KB

  • Sample

    200115-7nysn18z5j

  • MD5

    b039e8258c2eed53883c6dd583d759cf

  • SHA1

    ec90ecbceb577bd64709bea55938e630b1b7bc85

  • SHA256

    1d3a840ff6bbb5f943f5636a8a908fc9208dca41bf2c719ed677db9881dedea3

  • SHA512

    252b2b215fbb963e556082cd094e32c6b3ff3f0f6ef9bb480242913bb3881d81c4c174c6b1085db76896a073c7cbd365a94ead50aaa6de66c543bfe29822173b

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://mysql.flypig.group/index-hold/FLXQVHJ/

exe.dropper

http://cmsw.de/ftk/letGHBb/

exe.dropper

http://homelyhomestay.in/scss/h0ozs6oa-wfdd6x2ig-816277/

exe.dropper

http://doortechpalace.com/css/zsgeq2-8f65c2-5417/

exe.dropper

http://casalindamw.com/assets/fbTuizf/

Targets

    • Target

      1d3a840ff6bbb5f943f5636a8a908fc9208dca41bf2c719ed677db9881dedea3

    • Size

      246KB

    • MD5

      b039e8258c2eed53883c6dd583d759cf

    • SHA1

      ec90ecbceb577bd64709bea55938e630b1b7bc85

    • SHA256

      1d3a840ff6bbb5f943f5636a8a908fc9208dca41bf2c719ed677db9881dedea3

    • SHA512

      252b2b215fbb963e556082cd094e32c6b3ff3f0f6ef9bb480242913bb3881d81c4c174c6b1085db76896a073c7cbd365a94ead50aaa6de66c543bfe29822173b

    Score
    10/10
    • Process spawned unexpected child process

MITRE ATT&CK Enterprise v6

Tasks