Overview

overview

10

task1

 

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bdc45dcdabbfad3665d697f253933e478a52389bcdbb95f2039aa78cb435947d.doc

  • Size

    151KB

  • Sample

    200127-x4hce5l8en

  • MD5

    830ca66c05f789ba4396fa2e5b3262f3

  • SHA1

    85b4dde497388db0448637163573157d0679b180

  • SHA256

    bdc45dcdabbfad3665d697f253933e478a52389bcdbb95f2039aa78cb435947d

  • SHA512

    beb4137c8bf17f6b553a5f3c09152540befaa738a1c7736063c2760740c32151472dc7e15d319e6872a10ccff69713f30547501a52658c5944860df9cfaab994

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://delhisexclinic.com/zds/jUzItNFoNN/
exe.dropper

https://lelangg.online/uydlcvg/xoZAiAes/
exe.dropper

https://usispf.org/wp-admin/vjWaya/
exe.dropper

https://www.sexylady.space/wp-admin/JM/
exe.dropper

https://www.metropolnet.gr/cgi-bin/eP1hbutDbo/

Targets

    • Target

      bdc45dcdabbfad3665d697f253933e478a52389bcdbb95f2039aa78cb435947d.doc

    • Size

      151KB

    • MD5

      830ca66c05f789ba4396fa2e5b3262f3

    • SHA1

      85b4dde497388db0448637163573157d0679b180

    • SHA256

      bdc45dcdabbfad3665d697f253933e478a52389bcdbb95f2039aa78cb435947d

    • SHA512

      beb4137c8bf17f6b553a5f3c09152540befaa738a1c7736063c2760740c32151472dc7e15d319e6872a10ccff69713f30547501a52658c5944860df9cfaab994

    Score
    10/10

    • Process spawned unexpected child process

    task1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks