General

  • Target

    ef6d3052007c7ed193f14b5ea2e72127b78379c3c00bd6a4bc2678424129002a.doc

  • Size

    152KB

  • Sample

    200127-94cg15vyjn

  • MD5

    2e4d8ccb29297205d154bfa1b1436ed1

  • SHA1

    c2ed63f732ed6894e8173c78b65607bc7ea714c4

  • SHA256

    ef6d3052007c7ed193f14b5ea2e72127b78379c3c00bd6a4bc2678424129002a

  • SHA512

    7e16bbf6c7dbe9fd8fcf3d5135a1ba5ea6a36327444a29821e4dee31b3f2f1bb7d3bca4758be8d8a8d91e165a3dd427cb1479bc1295f693396650b8af9c45d74

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://yochina.apps.zeroek.com/assets/GQK9Gly/

exe.dropper

http://www.bandarwinsbobet.com/wp-admin/7bw/

exe.dropper

http://test.pakspaservices.com/wp-content/Yi1j6O7/

exe.dropper

http://portal.meucompromisso.com/wp-admin/kQJ/

exe.dropper

https://wondersofgeorgia.com/wp-admin/jv7hvg/

Targets

    • Target

      ef6d3052007c7ed193f14b5ea2e72127b78379c3c00bd6a4bc2678424129002a.doc

    • Size

      152KB

    • MD5

      2e4d8ccb29297205d154bfa1b1436ed1

    • SHA1

      c2ed63f732ed6894e8173c78b65607bc7ea714c4

    • SHA256

      ef6d3052007c7ed193f14b5ea2e72127b78379c3c00bd6a4bc2678424129002a

    • SHA512

      7e16bbf6c7dbe9fd8fcf3d5135a1ba5ea6a36327444a29821e4dee31b3f2f1bb7d3bca4758be8d8a8d91e165a3dd427cb1479bc1295f693396650b8af9c45d74

    Score
    10/10
    • Process spawned unexpected child process

MITRE ATT&CK Enterprise v6

Tasks