Overview

overview

10

task1

 

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c963c83bc1fa7d5378c453463ce990d85858b7f96c08e9012a7ad72ea063f31e.doc

  • Size

    151KB

  • Sample

    200127-wt3jhx4mb2

  • MD5

    ff24c629aacc4150d597ed7b865d31c0

  • SHA1

    d048a0573681f7cac3b3a609deafd43103a438b5

  • SHA256

    c963c83bc1fa7d5378c453463ce990d85858b7f96c08e9012a7ad72ea063f31e

  • SHA512

    a896aa7ca741b44d76e2680fceaa1bb626c4428c7f2a02c204e251c3e61539aab0b031fd673be0ab1d9976368c1d6cbf55afa36a73e756292de43d85204d16da

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://delhisexclinic.com/zds/jUzItNFoNN/
exe.dropper

https://lelangg.online/uydlcvg/xoZAiAes/
exe.dropper

https://usispf.org/wp-admin/vjWaya/
exe.dropper

https://www.sexylady.space/wp-admin/JM/
exe.dropper

https://www.metropolnet.gr/cgi-bin/eP1hbutDbo/

Targets

    • Target

      c963c83bc1fa7d5378c453463ce990d85858b7f96c08e9012a7ad72ea063f31e.doc

    • Size

      151KB

    • MD5

      ff24c629aacc4150d597ed7b865d31c0

    • SHA1

      d048a0573681f7cac3b3a609deafd43103a438b5

    • SHA256

      c963c83bc1fa7d5378c453463ce990d85858b7f96c08e9012a7ad72ea063f31e

    • SHA512

      a896aa7ca741b44d76e2680fceaa1bb626c4428c7f2a02c204e251c3e61539aab0b031fd673be0ab1d9976368c1d6cbf55afa36a73e756292de43d85204d16da

    Score
    10/10

    • Process spawned unexpected child process

    task1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks