Overview

overview

10

Static

static

1

Enquiry 09.29.23.xlam

windows7-x64

10

Enquiry 09.29.23.xlam

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Enquiry 09.29.23.xlam

  • Size

    729KB

  • Sample

    231011-hfzfcshf42

  • MD5

    201cd0a2fc6a87d25d6aed1e975fae71

  • SHA1

    ceccbf7e0dfb69dda31c49b218989b8894f5b48c

  • SHA256

    31ec13333c42a317cbfb1309873e4c2e548fd43b4384d7fec3783ce6b462aeed

  • SHA512

    f02d44c26d20ec39961878a1716d4849e7a49cc4c8ca6351d6e5aa5cc266a53a1a081e0a99ee4d8edb5e6efe06048995c8b54e96017b6bd00f4644a633ab2cce

  • SSDEEP

    12288:rblepfVSufnLqB+CodKtca2W3l/yWsGELZeylISzVpk7IidIOOKGTiUed66a3xBe:MpfwImBhowH3KWsgyDVpk7wO/X6bhBVk

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
ps1.dropper

https://uploaddeimagens.com.br/images/004/616/609/original/rump_vbs.jpg?1695408937
exe.dropper

https://uploaddeimagens.com.br/images/004/616/609/original/rump_vbs.jpg?1695408937

Targets

    • Target

      Enquiry 09.29.23.xlam

    • Size

      729KB

    • MD5

      201cd0a2fc6a87d25d6aed1e975fae71

    • SHA1

      ceccbf7e0dfb69dda31c49b218989b8894f5b48c

    • SHA256

      31ec13333c42a317cbfb1309873e4c2e548fd43b4384d7fec3783ce6b462aeed

    • SHA512

      f02d44c26d20ec39961878a1716d4849e7a49cc4c8ca6351d6e5aa5cc266a53a1a081e0a99ee4d8edb5e6efe06048995c8b54e96017b6bd00f4644a633ab2cce

    • SSDEEP

      12288:rblepfVSufnLqB+CodKtca2W3l/yWsGELZeylISzVpk7IidIOOKGTiUed66a3xBe:MpfwImBhowH3KWsgyDVpk7wO/X6bhBVk

    Score
    10/10

    • Blocklisted process makes network request

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks