General

  • Target

    ddf422611af9b85bc637b37dee787f3786d6d932e909908c6a8ede726c63ed70.doc

  • Size

    153KB

  • Sample

    200128-5vwbtdg1ys

  • MD5

    688cbf9f6aa70f957d37b63935295249

  • SHA1

    ae5ed35e6989e8c3feaee5abc432231ad869bbdd

  • SHA256

    ddf422611af9b85bc637b37dee787f3786d6d932e909908c6a8ede726c63ed70

  • SHA512

    4ab99caf6e35057e0f56c4c8a4e208aa2fc27258e7fc15a82c0992d46d0651dd8416f9beaa87063f658cc7b875b10117ae5606c3032b74b1be189cc5eec27c1e

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://camnangtrithuc.com/wp-admin/rysO51/

exe.dropper

http://srgasia.com.my/wp-content/vmcG8715/

exe.dropper

https://www.amedspor.com.tr/trsss/2aCO1Gkwg/

exe.dropper

https://uklid.ir/cgi-bin/8v/

exe.dropper

https://bffanmiefan.tk/cgi-bin/wYvv84846/

Targets

    • Target

      ddf422611af9b85bc637b37dee787f3786d6d932e909908c6a8ede726c63ed70.doc

    • Size

      153KB

    • MD5

      688cbf9f6aa70f957d37b63935295249

    • SHA1

      ae5ed35e6989e8c3feaee5abc432231ad869bbdd

    • SHA256

      ddf422611af9b85bc637b37dee787f3786d6d932e909908c6a8ede726c63ed70

    • SHA512

      4ab99caf6e35057e0f56c4c8a4e208aa2fc27258e7fc15a82c0992d46d0651dd8416f9beaa87063f658cc7b875b10117ae5606c3032b74b1be189cc5eec27c1e

    Score
    10/10
    • Process spawned unexpected child process

    • Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks