General

  • Target

    e849501d3e7272570fb9d8adc773b76260eecd17d2ea57f233110401a9fc17b4.doc

  • Size

    174KB

  • Sample

    200128-asd9ynh2e2

  • MD5

    339eb25724b3b4119bea646cecf3bbea

  • SHA1

    e1c18b5ff3e27ef46538c8f3deabb881be1a08b3

  • SHA256

    e849501d3e7272570fb9d8adc773b76260eecd17d2ea57f233110401a9fc17b4

  • SHA512

    ae38fe845d541beb67b412532558058b2b817f2f8fee1cb324fa29a617b00c1ff2bb8c5ee480b072a4b99d96cab83713e47a53f43cb02c6bffb8421165f03f2f

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://zethler.com/cgi-bin/8k1/

exe.dropper

http://emmaurlogisticsltd.com/wp-content/wm/

exe.dropper

https://www.rimayaswimwear.com/msxnoa/dx8frn/

exe.dropper

https://aredsm.com/l4jn4/ol11/

exe.dropper

https://fashionlifestyle.net/tmp/d7so/

Targets

    • Target

      e849501d3e7272570fb9d8adc773b76260eecd17d2ea57f233110401a9fc17b4.doc

    • Size

      174KB

    • MD5

      339eb25724b3b4119bea646cecf3bbea

    • SHA1

      e1c18b5ff3e27ef46538c8f3deabb881be1a08b3

    • SHA256

      e849501d3e7272570fb9d8adc773b76260eecd17d2ea57f233110401a9fc17b4

    • SHA512

      ae38fe845d541beb67b412532558058b2b817f2f8fee1cb324fa29a617b00c1ff2bb8c5ee480b072a4b99d96cab83713e47a53f43cb02c6bffb8421165f03f2f

    Score
    10/10
    • Process spawned unexpected child process

MITRE ATT&CK Enterprise v6

Tasks