Overview

overview

10

task1

 

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b1021cbf9b30925f479bb668745f2326edac3d2edf2fcb25f364a0d748fbc40.doc

  • Size

    175KB

  • Sample

    200128-8mnxhl5zhx

  • MD5

    08d7fd1cbf9fdb2d501ead9408d1217f

  • SHA1

    5005643f35fd4d2a649974650f35d06069e6276f

  • SHA256

    4b1021cbf9b30925f479bb668745f2326edac3d2edf2fcb25f364a0d748fbc40

  • SHA512

    c48ddc89fe778ed473ebea43bb1b4fc77ba9c787251e32cf0b7a90c60af3ea3df76161bbf9b327e30c2b1fdadf9bb663b307d5330b23f2c3fdeee32b60e3061c

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://earlingramjr.com/wp-admin/jMVDLv8/
exe.dropper

http://empower4talent.com/calendar/uf475/
exe.dropper

http://emyrs-eg.lehmergroup.com/YaePG8Heh9/
exe.dropper

http://expressdocuments.org/egxoii/fO852/
exe.dropper

http://fastagindia.hapus.app/cgi-bin/IJ/

Targets

    • Target

      4b1021cbf9b30925f479bb668745f2326edac3d2edf2fcb25f364a0d748fbc40.doc

    • Size

      175KB

    • MD5

      08d7fd1cbf9fdb2d501ead9408d1217f

    • SHA1

      5005643f35fd4d2a649974650f35d06069e6276f

    • SHA256

      4b1021cbf9b30925f479bb668745f2326edac3d2edf2fcb25f364a0d748fbc40

    • SHA512

      c48ddc89fe778ed473ebea43bb1b4fc77ba9c787251e32cf0b7a90c60af3ea3df76161bbf9b327e30c2b1fdadf9bb663b307d5330b23f2c3fdeee32b60e3061c

    Score
    10/10

    • Process spawned unexpected child process

    task1

MITRE ATT&CK Enterprise v6

Tasks