Overview

overview

10

Static

static

J-1538791023.xlsb

windows7_x64

10

J-1538791023.xlsb

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    uqtauouissqmi.zip
  • Size 1.0MB
  • Sample220419-kvfb5seac2
  • SHA256 09bf1ebc8306d6fa2539d09b3fdc22429bd2d894fe50c3dcc7e48f51b2f173b4
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Language

  • xlm4.0

Source
URLs
  • xlm40.dropper

    https://debtsolversuk.co.uk/HLpeQJZi/NbVfNbhn.png
  • xlm40.dropper

    https://pablopereirasilvaluis.com.br/OHTvXEr9c/NbVfNbhn.png
  • xlm40.dropper

    https://portalregionpuno.com/088aFy0Xc8ap/NbVfNbhn.png

Targets

    • Target
      J-1538791023.xlsb
    • Size 1.2MB
    • SHA256 bcd3175fd28e63e384b021c6fa9c229a8db4789e84a1dc74339b68593f237b6d
    • MD5 SHA1 SHA512
    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks