General

  • Target

    16d6eedd98ece7e625efc76807762d83dc7a28a2f8ce3aca15fe6f9a2eb16586.doc

  • Size

    152KB

  • Sample

    200127-3yd6t5s64e

  • MD5

    5d18cd0651f5c5edae405b1161b69ea4

  • SHA1

    e70ab74ee685550afbff5a90bef4fb2b912c435e

  • SHA256

    16d6eedd98ece7e625efc76807762d83dc7a28a2f8ce3aca15fe6f9a2eb16586

  • SHA512

    46f7a669941f3f4511c3e13f4e83b52d72493afdaee47e111c940be2ac6bf8ff3cccccb89d53ababac6a3b410dbc08710830adc3dbb0b4b3449877d993ce1981

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://yochina.apps.zeroek.com/assets/GQK9Gly/

exe.dropper

http://www.bandarwinsbobet.com/wp-admin/7bw/

exe.dropper

http://test.pakspaservices.com/wp-content/Yi1j6O7/

exe.dropper

http://portal.meucompromisso.com/wp-admin/kQJ/

exe.dropper

https://wondersofgeorgia.com/wp-admin/jv7hvg/

Targets

    • Target

      16d6eedd98ece7e625efc76807762d83dc7a28a2f8ce3aca15fe6f9a2eb16586.doc

    • Size

      152KB

    • MD5

      5d18cd0651f5c5edae405b1161b69ea4

    • SHA1

      e70ab74ee685550afbff5a90bef4fb2b912c435e

    • SHA256

      16d6eedd98ece7e625efc76807762d83dc7a28a2f8ce3aca15fe6f9a2eb16586

    • SHA512

      46f7a669941f3f4511c3e13f4e83b52d72493afdaee47e111c940be2ac6bf8ff3cccccb89d53ababac6a3b410dbc08710830adc3dbb0b4b3449877d993ce1981

    Score
    10/10
    • Process spawned unexpected child process

MITRE ATT&CK Enterprise v6

Tasks