Overview

overview

10

task1

 

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3257efa9ab0130ba1bf8e78321dd5d168064911ad6c0e22932bc4914b9a6a994.doc

  • Size

    127KB

  • Sample

    200131-fqjm4ktv32

  • MD5

    37cdde5e138d5691532cc3d63620807f

  • SHA1

    5a5b1de56d87dea47558effcc6d25297d71b321c

  • SHA256

    3257efa9ab0130ba1bf8e78321dd5d168064911ad6c0e22932bc4914b9a6a994

  • SHA512

    8ba5a6e1ee4e4976717780715698d5e35909993fd96bddd3dc3fe9596302ed09a358875c9fdcb9a9c333091db7bd89f6c6af86bea69c851ca5c4adb9a3e7e368

Score
10/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://muabanmaylaser.com/wp-admin/879/
exe.dropper

http://www.codetisan.com/wp-content/fO4yKcL/
exe.dropper

http://bettyasha.com/phhb/nrs81t/
exe.dropper

http://payer.orientsportshouse.com/rvso/rcdbl/
exe.dropper

http://support.deltainfocom.com/gjqs/9pz/

Targets

    • Target

      3257efa9ab0130ba1bf8e78321dd5d168064911ad6c0e22932bc4914b9a6a994.doc

    • Size

      127KB

    • MD5

      37cdde5e138d5691532cc3d63620807f

    • SHA1

      5a5b1de56d87dea47558effcc6d25297d71b321c

    • SHA256

      3257efa9ab0130ba1bf8e78321dd5d168064911ad6c0e22932bc4914b9a6a994

    • SHA512

      8ba5a6e1ee4e4976717780715698d5e35909993fd96bddd3dc3fe9596302ed09a358875c9fdcb9a9c333091db7bd89f6c6af86bea69c851ca5c4adb9a3e7e368

    Score
    10/10

    • Process spawned unexpected child process

    • Drops file in System32 directory

    task1

MITRE ATT&CK Matrix

Tasks