General

  • Target

    ca7ed00659b9a1d7f17a9fef6e55718e

  • Size

    158KB

  • Sample

    240315-e5z7eagc5s

  • MD5

    ca7ed00659b9a1d7f17a9fef6e55718e

  • SHA1

    5c1af52e2f6c17a3ec6878431f8303e93673ef98

  • SHA256

    cee52cea1d85083b781607bbe9752269f9336e23cd58a37f3f588fbfab9256a8

  • SHA512

    d84d6bf923c64acc56e012048f158cdf257e87dfc0af4ce95b00a961715c545f4edfa394c6d55c6d6eab560e7e07b0bd9656a636fcdf56099866a35d511cf2b2

  • SSDEEP

    3072:pHlTkdm3bGeAxidxVymd1xXPMU9VlUBWA6CFvA7bRCxAVIKKNB:pFTkeGKdxVyWxfMU3liWA6FsYq

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://biopaten.no/xeBP8Oj5/gg.html

xlm40.dropper

https://beartoothkawasaki.com/QJT19jhtwHt/gg.html

Targets

    • Target

      ca7ed00659b9a1d7f17a9fef6e55718e

    • Size

      158KB

    • MD5

      ca7ed00659b9a1d7f17a9fef6e55718e

    • SHA1

      5c1af52e2f6c17a3ec6878431f8303e93673ef98

    • SHA256

      cee52cea1d85083b781607bbe9752269f9336e23cd58a37f3f588fbfab9256a8

    • SHA512

      d84d6bf923c64acc56e012048f158cdf257e87dfc0af4ce95b00a961715c545f4edfa394c6d55c6d6eab560e7e07b0bd9656a636fcdf56099866a35d511cf2b2

    • SSDEEP

      3072:pHlTkdm3bGeAxidxVymd1xXPMU9VlUBWA6CFvA7bRCxAVIKKNB:pFTkeGKdxVyWxfMU3liWA6FsYq

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks