General

  • Target

    74ff7e7adc7c3926e45143fe7ee1ba07

  • Size

    36KB

  • Sample

    240125-t8besabgam

  • MD5

    74ff7e7adc7c3926e45143fe7ee1ba07

  • SHA1

    04f0cc8f411db9545e825ce05218ea91b00c48ba

  • SHA256

    dd869415613ab9aea2599927c23572bcefd9466af5a69f8f6ab239dc2f6c84bb

  • SHA512

    f56de18c85d60649b10fa3c444713a049faa9ab6e99162fe357cd6ffae17e0e8b550b5b57fae889ca3059a94299fc7a27ae3b2e415f291c691eb4a90842ea69a

  • SSDEEP

    768:APqNk3hbdlylKsgqopeJBWhZFGkE+cL2NdAJnGbm5+LlQqKqTD:Mok3hbdlylKsgqopeJBWhZFGkE+cL2Nr

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://markens.online/wp-data.php

xlm40.dropper

https://statedauto.com/wp-data.php

Targets

    • Target

      74ff7e7adc7c3926e45143fe7ee1ba07

    • Size

      36KB

    • MD5

      74ff7e7adc7c3926e45143fe7ee1ba07

    • SHA1

      04f0cc8f411db9545e825ce05218ea91b00c48ba

    • SHA256

      dd869415613ab9aea2599927c23572bcefd9466af5a69f8f6ab239dc2f6c84bb

    • SHA512

      f56de18c85d60649b10fa3c444713a049faa9ab6e99162fe357cd6ffae17e0e8b550b5b57fae889ca3059a94299fc7a27ae3b2e415f291c691eb4a90842ea69a

    • SSDEEP

      768:APqNk3hbdlylKsgqopeJBWhZFGkE+cL2NdAJnGbm5+LlQqKqTD:Mok3hbdlylKsgqopeJBWhZFGkE+cL2Nr

    Score
    10/10
    • Kinsing

      Kinsing is a loader written in Golang.

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks