Overview

overview

10

task1

 

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7c325dbf4144bf45f766f6a7844c2eb436d8f8c9c8dbcbe989cc5358d7940922.doc

  • Size

    153KB

  • Sample

    200128-al9vxlsr9j

  • MD5

    a4e5d1b7c9e83f372930ad574a8dbb61

  • SHA1

    c7b6a1c61bb7435bbb38b34285ef7021b1a7af4b

  • SHA256

    7c325dbf4144bf45f766f6a7844c2eb436d8f8c9c8dbcbe989cc5358d7940922

  • SHA512

    4fd2e7652c1eae25f9226a6be5eb1fc91059e212bca0f11b5be891b22350945f0c5a83f0b4e26cd64dd36bd64c4def77ff8d293c520ad450e2b242f31e9db94f

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://covaihomes.com/cgi-bin/t3ln/
exe.dropper

http://saxseafood.com/wp-content/VHTlLciKX/
exe.dropper

https://zaamira.com/wp-admin/2sof7o/
exe.dropper

https://shopify-ed.apps.zeroek.com/dist/hxrf9/
exe.dropper

https://sophistproduction.com/wp-includes/Wijy9/

Targets

    • Target

      7c325dbf4144bf45f766f6a7844c2eb436d8f8c9c8dbcbe989cc5358d7940922.doc

    • Size

      153KB

    • MD5

      a4e5d1b7c9e83f372930ad574a8dbb61

    • SHA1

      c7b6a1c61bb7435bbb38b34285ef7021b1a7af4b

    • SHA256

      7c325dbf4144bf45f766f6a7844c2eb436d8f8c9c8dbcbe989cc5358d7940922

    • SHA512

      4fd2e7652c1eae25f9226a6be5eb1fc91059e212bca0f11b5be891b22350945f0c5a83f0b4e26cd64dd36bd64c4def77ff8d293c520ad450e2b242f31e9db94f

    Score
    10/10

    • Process spawned unexpected child process

    task1

MITRE ATT&CK Enterprise v6

Tasks