Overview

overview

10

task1

 

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a4fedc1c24a09361371e1e7c9e718266204bb3ad9935116c5f562be7eadff14.doc

  • Size

    151KB

  • Sample

    200127-w45s66xvva

  • MD5

    02c64b9ab440509e4313c7b1933aada7

  • SHA1

    2907ddd8164c3ac92f6069a21660788f948c13f6

  • SHA256

    0a4fedc1c24a09361371e1e7c9e718266204bb3ad9935116c5f562be7eadff14

  • SHA512

    1c76e74b96020be856e241d9d7ed187ea2a18cc2e94513d7aeb7c05ad5c87029ac6a7c8fa8cf4426668dbb177b5585430e388d64303fe83300d72e9e02fc1057

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://delhisexclinic.com/zds/jUzItNFoNN/
exe.dropper

https://lelangg.online/uydlcvg/xoZAiAes/
exe.dropper

https://usispf.org/wp-admin/vjWaya/
exe.dropper

https://www.sexylady.space/wp-admin/JM/
exe.dropper

https://www.metropolnet.gr/cgi-bin/eP1hbutDbo/

Targets

    • Target

      0a4fedc1c24a09361371e1e7c9e718266204bb3ad9935116c5f562be7eadff14.doc

    • Size

      151KB

    • MD5

      02c64b9ab440509e4313c7b1933aada7

    • SHA1

      2907ddd8164c3ac92f6069a21660788f948c13f6

    • SHA256

      0a4fedc1c24a09361371e1e7c9e718266204bb3ad9935116c5f562be7eadff14

    • SHA512

      1c76e74b96020be856e241d9d7ed187ea2a18cc2e94513d7aeb7c05ad5c87029ac6a7c8fa8cf4426668dbb177b5585430e388d64303fe83300d72e9e02fc1057

    Score
    10/10

    • Process spawned unexpected child process

    task1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks