General

  • Target

    7267e69d8ba19b7567f782a3f01d78162aed8b2de72e05608c7215551009f851.doc

  • Size

    153KB

  • Sample

    200128-waegvegwfj

  • MD5

    978038102160fc20c585ed48c4e2df2e

  • SHA1

    899265aee410a59c14e87ec5fa7aa637542fbf03

  • SHA256

    7267e69d8ba19b7567f782a3f01d78162aed8b2de72e05608c7215551009f851

  • SHA512

    3f6d3f14ddd247b4ca397023e220156f8ce7f9ea0fa71fafa4818484527bddb45efed6492f82ee416719ea407c27f91a10cfd956ae24ab601a21201c8b1a2481

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://fietsenmetkinderen.info/App_Data/ASHFouI/

exe.dropper

https://rokonworld.xyz/cgi-bin/bf99ypv-nka70qs-62/

exe.dropper

http://www.meubelontwerpstudioheyne.nl/languages/ndZNarqnj/

exe.dropper

http://bursary.engsoc.queensu.ca/wp-admin/48ech-ddpjkzp-29821620/

exe.dropper

http://lapmangfpt.haiphong.vn/wp-admin/k50i2cm5qi-9wnfau-7879373385/

Targets

    • Target

      7267e69d8ba19b7567f782a3f01d78162aed8b2de72e05608c7215551009f851.doc

    • Size

      153KB

    • MD5

      978038102160fc20c585ed48c4e2df2e

    • SHA1

      899265aee410a59c14e87ec5fa7aa637542fbf03

    • SHA256

      7267e69d8ba19b7567f782a3f01d78162aed8b2de72e05608c7215551009f851

    • SHA512

      3f6d3f14ddd247b4ca397023e220156f8ce7f9ea0fa71fafa4818484527bddb45efed6492f82ee416719ea407c27f91a10cfd956ae24ab601a21201c8b1a2481

    Score
    10/10
    • Process spawned unexpected child process

    • Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks