General

  • Target

    6f7ef2942319a8f55b338d43ac0717e2999baaf867ba160e6cdc15c85b47a4e1.doc

  • Size

    153KB

  • Sample

    200128-6qx1xgehla

  • MD5

    de6a3ef14e863053699ec2f24e96a57b

  • SHA1

    406a2f96efe9d77df648d80e9dd281be36b27e31

  • SHA256

    6f7ef2942319a8f55b338d43ac0717e2999baaf867ba160e6cdc15c85b47a4e1

  • SHA512

    42a1bbbab6421b687ff37b876ab0845344b1acc0b67c817e87178bbc93dcbd6e6c5d476f2d8f22da070ea509f3bfbf26a66f21f3fbe3ab30ee64880b9e4c3722

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://fietsenmetkinderen.info/App_Data/ASHFouI/

exe.dropper

https://rokonworld.xyz/cgi-bin/bf99ypv-nka70qs-62/

exe.dropper

http://www.meubelontwerpstudioheyne.nl/languages/ndZNarqnj/

exe.dropper

http://bursary.engsoc.queensu.ca/wp-admin/48ech-ddpjkzp-29821620/

exe.dropper

http://lapmangfpt.haiphong.vn/wp-admin/k50i2cm5qi-9wnfau-7879373385/

Targets

    • Target

      6f7ef2942319a8f55b338d43ac0717e2999baaf867ba160e6cdc15c85b47a4e1.doc

    • Size

      153KB

    • MD5

      de6a3ef14e863053699ec2f24e96a57b

    • SHA1

      406a2f96efe9d77df648d80e9dd281be36b27e31

    • SHA256

      6f7ef2942319a8f55b338d43ac0717e2999baaf867ba160e6cdc15c85b47a4e1

    • SHA512

      42a1bbbab6421b687ff37b876ab0845344b1acc0b67c817e87178bbc93dcbd6e6c5d476f2d8f22da070ea509f3bfbf26a66f21f3fbe3ab30ee64880b9e4c3722

    Score
    10/10
    • Process spawned unexpected child process

MITRE ATT&CK Enterprise v6

Tasks