Overview

overview

10

task1

 

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e51ac8f71a71830a6de10d80472127cac7285dc7210b5da7b8b830047491b1a1.doc

  • Size

    151KB

  • Sample

    200127-wvqbsgeh1s

  • MD5

    d7b74b174d0d6a4f67d6e8995788078b

  • SHA1

    15f8bffeb9e78b8f566180c4cac5a39da41aa9b2

  • SHA256

    e51ac8f71a71830a6de10d80472127cac7285dc7210b5da7b8b830047491b1a1

  • SHA512

    97816996ae97c5c58c6b3e5a456bdc97321bd564fc423fea2e3005689b4e4d4c65298ad8863f31f864ca5f3ee394261ceec485e5918cdedd93591e8f864be7c9

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://delhisexclinic.com/zds/jUzItNFoNN/
exe.dropper

https://lelangg.online/uydlcvg/xoZAiAes/
exe.dropper

https://usispf.org/wp-admin/vjWaya/
exe.dropper

https://www.sexylady.space/wp-admin/JM/
exe.dropper

https://www.metropolnet.gr/cgi-bin/eP1hbutDbo/

Targets

    • Target

      e51ac8f71a71830a6de10d80472127cac7285dc7210b5da7b8b830047491b1a1.doc

    • Size

      151KB

    • MD5

      d7b74b174d0d6a4f67d6e8995788078b

    • SHA1

      15f8bffeb9e78b8f566180c4cac5a39da41aa9b2

    • SHA256

      e51ac8f71a71830a6de10d80472127cac7285dc7210b5da7b8b830047491b1a1

    • SHA512

      97816996ae97c5c58c6b3e5a456bdc97321bd564fc423fea2e3005689b4e4d4c65298ad8863f31f864ca5f3ee394261ceec485e5918cdedd93591e8f864be7c9

    Score
    10/10

    • Process spawned unexpected child process

    task1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks