General

  • Target

    c5fa1fa97c96f5fcba878582ea32a6e29669de25dfdbf65b7cbc19b97427b541.doc

  • Size

    153KB

  • Sample

    200127-tg7nnv88mn

  • MD5

    23a9259c6aa183104057b1b124e41740

  • SHA1

    575f31e140cb9fa824750378607adc51e9cda45f

  • SHA256

    c5fa1fa97c96f5fcba878582ea32a6e29669de25dfdbf65b7cbc19b97427b541

  • SHA512

    675b0c10596657a07889bbb88f999535659040d7cdf5130ac441b990051693271bd9c1c7f9d7c0b4f9c6cda7f9f8e5ba11916b446f47c3abebc1e5c79e027ad8

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://camnangtrithuc.com/wp-admin/rysO51/

exe.dropper

http://srgasia.com.my/wp-content/vmcG8715/

exe.dropper

https://www.amedspor.com.tr/trsss/2aCO1Gkwg/

exe.dropper

https://uklid.ir/cgi-bin/8v/

exe.dropper

https://bffanmiefan.tk/cgi-bin/wYvv84846/

Targets

    • Target

      c5fa1fa97c96f5fcba878582ea32a6e29669de25dfdbf65b7cbc19b97427b541.doc

    • Size

      153KB

    • MD5

      23a9259c6aa183104057b1b124e41740

    • SHA1

      575f31e140cb9fa824750378607adc51e9cda45f

    • SHA256

      c5fa1fa97c96f5fcba878582ea32a6e29669de25dfdbf65b7cbc19b97427b541

    • SHA512

      675b0c10596657a07889bbb88f999535659040d7cdf5130ac441b990051693271bd9c1c7f9d7c0b4f9c6cda7f9f8e5ba11916b446f47c3abebc1e5c79e027ad8

    Score
    10/10
    • Process spawned unexpected child process

    • Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks