General

  • Target

    97de0d19eda60a69636d2f91d9780e66d22693d55dcde7bdd20873276ea4406f.doc

  • Size

    153KB

  • Sample

    200128-725dm7kyne

  • MD5

    97931725b73ad7812dd93232c02eb8b2

  • SHA1

    34a95c88fc4ecddbd0aa25779984a6ffa3871e76

  • SHA256

    97de0d19eda60a69636d2f91d9780e66d22693d55dcde7bdd20873276ea4406f

  • SHA512

    064970a17db8dd10e1276b3f2b8b8ecceb667e38a1afe3c878ab42bdfff9f1250a832ea77fcbe0564d6818031a7f69197835c30cfae249a4c2e09bb9ab35eb2c

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://fietsenmetkinderen.info/App_Data/ASHFouI/

exe.dropper

https://rokonworld.xyz/cgi-bin/bf99ypv-nka70qs-62/

exe.dropper

http://www.meubelontwerpstudioheyne.nl/languages/ndZNarqnj/

exe.dropper

http://bursary.engsoc.queensu.ca/wp-admin/48ech-ddpjkzp-29821620/

exe.dropper

http://lapmangfpt.haiphong.vn/wp-admin/k50i2cm5qi-9wnfau-7879373385/

Targets

    • Target

      97de0d19eda60a69636d2f91d9780e66d22693d55dcde7bdd20873276ea4406f.doc

    • Size

      153KB

    • MD5

      97931725b73ad7812dd93232c02eb8b2

    • SHA1

      34a95c88fc4ecddbd0aa25779984a6ffa3871e76

    • SHA256

      97de0d19eda60a69636d2f91d9780e66d22693d55dcde7bdd20873276ea4406f

    • SHA512

      064970a17db8dd10e1276b3f2b8b8ecceb667e38a1afe3c878ab42bdfff9f1250a832ea77fcbe0564d6818031a7f69197835c30cfae249a4c2e09bb9ab35eb2c

    Score
    10/10
    • Process spawned unexpected child process

MITRE ATT&CK Enterprise v6

Tasks