Overview

overview

10

task1

 

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33dc1ca4bfb0a80a0e3385da574cef570f46a812911df1a19a705f7696a6c874.doc

  • Size

    151KB

  • Sample

    200127-2l2hvb86he

  • MD5

    106f6b54f3043b756cac485347539f10

  • SHA1

    a232d6d474e94c208765800899a08beb1df7126f

  • SHA256

    33dc1ca4bfb0a80a0e3385da574cef570f46a812911df1a19a705f7696a6c874

  • SHA512

    82248b2a552c0332492d27ce9a7fc95c1c75267d276ad7e74210887427898177140cd166dcae2d1beb8bd527812256d297f6cae7ae8dde1db8f43f8991f1c535

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://delhisexclinic.com/zds/jUzItNFoNN/
exe.dropper

https://lelangg.online/uydlcvg/xoZAiAes/
exe.dropper

https://usispf.org/wp-admin/vjWaya/
exe.dropper

https://www.sexylady.space/wp-admin/JM/
exe.dropper

https://www.metropolnet.gr/cgi-bin/eP1hbutDbo/

Targets

    • Target

      33dc1ca4bfb0a80a0e3385da574cef570f46a812911df1a19a705f7696a6c874.doc

    • Size

      151KB

    • MD5

      106f6b54f3043b756cac485347539f10

    • SHA1

      a232d6d474e94c208765800899a08beb1df7126f

    • SHA256

      33dc1ca4bfb0a80a0e3385da574cef570f46a812911df1a19a705f7696a6c874

    • SHA512

      82248b2a552c0332492d27ce9a7fc95c1c75267d276ad7e74210887427898177140cd166dcae2d1beb8bd527812256d297f6cae7ae8dde1db8f43f8991f1c535

    Score
    10/10

    • Process spawned unexpected child process

    task1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks