General

  • Target

    MDE_File_Sample_24802edbc94fca1b2fc790160f35fa1b560d7dc5.zip

  • Size

    184KB

  • Sample

    240228-zbdfrsdb98

  • MD5

    23fdf7fcc5e2b835223dd695964808eb

  • SHA1

    1f8edc3e9fcd50df8bdf26433cd15bf7d1bfba41

  • SHA256

    60e8d567aea586fc641b7a20a8b8707ebb9abb667f3369b29894bdfbf2449d52

  • SHA512

    e7dc7dce37091e41e2ac963b088642cfc0a0a941f22bf71618b2dfb39ef82c3739d0cbb0f803d07ae30f36a6e8c75c578a86b4b8ae904194e8bbd715539e5d5e

  • SSDEEP

    3072:WHo1prca2hLo1037eN9TvoLozqs7S6jKhQlofI+CXwmGqRc1tHYFrXVwrIsWsEXs:z1dc3K103yfroLozqs7PFTX5c8FrXy0W

Score
10/10

Malware Config

Targets

    • Target

      24802edbc94fca1b2fc790160f35fa1b560d7dc5

    • Size

      185KB

    • MD5

      f51c140f5c247f0afb3fb7b2f41e4777

    • SHA1

      24802edbc94fca1b2fc790160f35fa1b560d7dc5

    • SHA256

      b423853fbd7aea5c91ab52c2b445ec9bde2e47e480a095b43a38ac2c23b87ac4

    • SHA512

      6c89481529e2240df2429d3e058e03dd83de19388898c6e0eb276bcf475360d51682877e47281db2113e0e2a0d074204c192f75d28fbcc1adb8ad5ec9804c906

    • SSDEEP

      3072:/92pRgj0OuGSS3NuurKiw7rj3EWKp8r+z5BqoCiqFo7UuQjo+2E:/wgjp3SYuyReEWK2IBuiqFcUho+d

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks