General

  • Target
    mshtml.zip
  • Size 262KB
  • Sample240217-3almjacb64
  • SHA256 31475717735f9aee20def2a4044b42a52cb92e8cf885b92a042099a273688135
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Rule
Microsoft Office MHTML OLEObject
C2
  • arsenal.30cm.tw:1212/word.html

  • http://175.24.190.249/note.html

  • http://trendparlye.com/wiki0509.html

  • http://hidusi.com/e8c76295a5f9acb7/side.html

Targets

    • Target
      Challenge_FIles/Employee_W2_Form.docx
    • Size 12KB
    • SHA256 679bbe0c50754853978a3a583505ebb99bce720cf26a6aaf8be06cd879701ff1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    4/10
    • Target
      Challenge_FIles/Employees_Contact_Audit_Oct_2021.docx
    • Size 12KB
    • SHA256 ed2b9e22aef3e545814519151528b2d11a5e73d1b2119c067e672b653ab6855a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    4/10
    • Target
      Challenge_FIles/Work_From_Home_Survey.doc
    • Size 26KB
    • SHA256 84674acffba5101c8ac518019a9afe2a78a675ef3525a44dceddeed8a0092c69
    • MD5 SHA1 SHA512 SSDEEP
    Score
    4/10
    • Target
      Challenge_FIles/income_tax_and_benefit_return_2021.docx
    • Size 23KB
    • SHA256 d0e1f97dbe2d0af9342e64d460527b088d85f96d38b1d1d4aa610c0987dca745
    • MD5 SHA1 SHA512 SSDEEP
    Score
    4/10
    • Target
      tools/numbers-to-string.py
    • Size 17KB
    • SHA256 332822ca13b283da92f399ac407ab0a99ab18df32e5996cee9386be54ba8a225
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      oledump.py
    • Size 100KB
    • SHA256 8902aaf410e4400728817162ce08106048ecb6a4a66a14ed7712426f9400b3d0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      plugin_biff.py
    • Size 139KB
    • SHA256 2031e6a7001c44532cbda669fed36218ceafd2bcc9c2f1458caf21a6e7b08547
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      plugin_clsid.py
    • Size 1KB
    • SHA256 04c0105d0fb3658d47ed73e8958029eaefc23fc9df6d9f53a70a1fb5e2defa07
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      plugin_dridex.py
    • Size 8KB
    • SHA256 abcdd7d762d083e381c8cc8f9b6ab30499fbd87430c4acb4a9805a14d7b91fdd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      plugin_hifo.py
    • Size 864B
    • SHA256 87a4855aca7e3d21219b88d1843386396afc94b6e8fd581d86f752110f760b49
    • MD5 SHA1 SHA512
    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks