General

  • Target

    EM1QO2xJcweQzp8jGCfjtIoKs.bin

  • Size

    670KB

  • Sample

    230709-mzzmpacd36

  • MD5

    73cad3204857e53193f69709c22bd3e7

  • SHA1

    6f7ce5552fddeb8cbacab93d4aabf53ef5397722

  • SHA256

    10cd503b6c49730790ce9f231827e3b48a0ab39e0327d9fe4fbd1f8a5502401e

  • SHA512

    3daba15ae35419b92564008a74b72f43500f13a2b988dc50b766802822d6ea7875b151d5be2a3d2a591dd929d9c28489b22b5d490afe9ad47dc103106f3098c7

  • SSDEEP

    12288:cn/zDvGHAykHSzLW/4+8bzbBSreMdhhgFK/UqWcskW570vY0:uzbGHAzHAjX1UcLzH5gw

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source

Targets

    • Target

      EM1QO2xJcweQzp8jGCfjtIoKs.bin

    • Size

      670KB

    • MD5

      73cad3204857e53193f69709c22bd3e7

    • SHA1

      6f7ce5552fddeb8cbacab93d4aabf53ef5397722

    • SHA256

      10cd503b6c49730790ce9f231827e3b48a0ab39e0327d9fe4fbd1f8a5502401e

    • SHA512

      3daba15ae35419b92564008a74b72f43500f13a2b988dc50b766802822d6ea7875b151d5be2a3d2a591dd929d9c28489b22b5d490afe9ad47dc103106f3098c7

    • SSDEEP

      12288:cn/zDvGHAykHSzLW/4+8bzbBSreMdhhgFK/UqWcskW570vY0:uzbGHAzHAjX1UcLzH5gw

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks