Overview

overview

10

Static

static

1

2023084 .xlam

windows7-x64

10

2023084 .xlam

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2023084 .xlam

  • Size

    605KB

  • Sample

    231005-k21lnabg82

  • MD5

    c4299323b25e15b75436b2d3b97a0377

  • SHA1

    b218643f49cdd92d34df9d92c5325c6bd4ee888c

  • SHA256

    319763c4253199fa108de1ced515b462bcf13fab283c69ad3bf5b62332fd3608

  • SHA512

    3a0e4bc1290a25bd37acb74a5b8bba56758fd3ccc98768997a29533d4d8f0ad30a63f85fd31adc9b7e59adfe010a98d10973ca1a507dff2451c1d03fc355e1ab

  • SSDEEP

    12288:DvKt/+eOwUrhO7yvqsWdwdhGvPyT6pAmXbdeA07njtRoGdb+F5cgl2Ifc2:D0+eOwUSC7BfG2mrYA07j7JCF5cgl2I3

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

https://uploaddeimagens.com.br/images/004/616/609/original/rump_vbs.jpg?1695408937
exe.dropper

https://uploaddeimagens.com.br/images/004/616/609/original/rump_vbs.jpg?1695408937

Targets

    • Target

      2023084 .xlam

    • Size

      605KB

    • MD5

      c4299323b25e15b75436b2d3b97a0377

    • SHA1

      b218643f49cdd92d34df9d92c5325c6bd4ee888c

    • SHA256

      319763c4253199fa108de1ced515b462bcf13fab283c69ad3bf5b62332fd3608

    • SHA512

      3a0e4bc1290a25bd37acb74a5b8bba56758fd3ccc98768997a29533d4d8f0ad30a63f85fd31adc9b7e59adfe010a98d10973ca1a507dff2451c1d03fc355e1ab

    • SSDEEP

      12288:DvKt/+eOwUrhO7yvqsWdwdhGvPyT6pAmXbdeA07njtRoGdb+F5cgl2Ifc2:D0+eOwUSC7BfG2mrYA07j7JCF5cgl2I3

    Score
    10/10

    • Blocklisted process makes network request

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks