General

  • Target

    c59b2ddb0c987078d33bd18be0d1d016d3849cb67d377e02f17759144b86a173

  • Size

    70KB

  • Sample

    241119-ltyb1avbmm

  • MD5

    75f99d1c4748d698c2cde745d4ded1c4

  • SHA1

    f0baacd632ad4e2fb8e4f3818e03adeb2efc78f0

  • SHA256

    c59b2ddb0c987078d33bd18be0d1d016d3849cb67d377e02f17759144b86a173

  • SHA512

    e4810d2a637c823e1b5427d36fe9d3b4e74ace08d25dbbe8a6496802af087677145007b4462892d9848c5cf21894159a1facda4a5fa335a4d4b2111731b878b8

  • SSDEEP

    1536:tOKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+1YW/ESKQHS1yXJFa5etyv:AKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMZ

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://congtycamvinh.com/plugins/jG3iqpQaTL1TXYMolH/

xlm40.dropper

http://ecube.com.mx/e2oCWBnC/6wp2K4sfQmVIRy6ZvdiH/

xlm40.dropper

http://dulichdichvu.net/libraries/6vhzwoZoNDSMtSC/

xlm40.dropper

http://gnif.org/administrator/G68HwUGlKNJNU2vh5cz/

xlm40.dropper

https://edoraseguros.com.br/cgi-bin/l7ZERv5deNsfzlZUZ/

xlm40.dropper

https://sanoma.allrent.nl/cgi-bin/KXbI5OhLJ/

Targets

    • Target

      c59b2ddb0c987078d33bd18be0d1d016d3849cb67d377e02f17759144b86a173

    • Size

      70KB

    • MD5

      75f99d1c4748d698c2cde745d4ded1c4

    • SHA1

      f0baacd632ad4e2fb8e4f3818e03adeb2efc78f0

    • SHA256

      c59b2ddb0c987078d33bd18be0d1d016d3849cb67d377e02f17759144b86a173

    • SHA512

      e4810d2a637c823e1b5427d36fe9d3b4e74ace08d25dbbe8a6496802af087677145007b4462892d9848c5cf21894159a1facda4a5fa335a4d4b2111731b878b8

    • SSDEEP

      1536:tOKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+1YW/ESKQHS1yXJFa5etyv:AKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMZ

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks