General
Static task
static1
URLScan task
urlscan1
Sample
https://mysmartidea.online/impeditnobis/voluptaset-149953820
Malware Config
Extracted
Language
xlm4.0
Source
URLs
xlm40.dropper
https://rickcovell.net/BuQQdjLrrO19/li.html
xlm40.dropper
https://networktmg.com/ryrwQGN3wPpT/li.html
xlm40.dropper
https://thamilanda.co.in/fui6yOqX0Wyb/li.html
Targets
-
-
Target
https://mysmartidea.online/impeditnobis/voluptaset-149953820
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Executes dropped EXE
-
Patched UPX-packed file
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-