General

  • Target

    7ffd8cc18790e4684ee2a0d7000a3c4176b8bdd3912d9e5c139301dc81ddfec8

  • Size

    70KB

  • Sample

    241119-m11w5szmal

  • MD5

    f35c438c7ab50f7a53de32a7c735c679

  • SHA1

    1057be1bb9d42b5a9de45ba70683cf4a15ab028b

  • SHA256

    7ffd8cc18790e4684ee2a0d7000a3c4176b8bdd3912d9e5c139301dc81ddfec8

  • SHA512

    939eb29e1ff79571d43a163434edb85c211c609f3992dc9164d8ed772ff675d48ffc9296bf63a5a8283b1d18d7e34a116d6b36fd3f63b08dcece302133b5954c

  • SSDEEP

    1536:tOKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+1YW/ESKQHS1yXJFa5etiv:AKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMJ

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://congtycamvinh.com/plugins/jG3iqpQaTL1TXYMolH/

xlm40.dropper

http://ecube.com.mx/e2oCWBnC/6wp2K4sfQmVIRy6ZvdiH/

xlm40.dropper

http://dulichdichvu.net/libraries/6vhzwoZoNDSMtSC/

xlm40.dropper

http://gnif.org/administrator/G68HwUGlKNJNU2vh5cz/

xlm40.dropper

https://edoraseguros.com.br/cgi-bin/l7ZERv5deNsfzlZUZ/

xlm40.dropper

https://sanoma.allrent.nl/cgi-bin/KXbI5OhLJ/

Targets

    • Target

      7ffd8cc18790e4684ee2a0d7000a3c4176b8bdd3912d9e5c139301dc81ddfec8

    • Size

      70KB

    • MD5

      f35c438c7ab50f7a53de32a7c735c679

    • SHA1

      1057be1bb9d42b5a9de45ba70683cf4a15ab028b

    • SHA256

      7ffd8cc18790e4684ee2a0d7000a3c4176b8bdd3912d9e5c139301dc81ddfec8

    • SHA512

      939eb29e1ff79571d43a163434edb85c211c609f3992dc9164d8ed772ff675d48ffc9296bf63a5a8283b1d18d7e34a116d6b36fd3f63b08dcece302133b5954c

    • SSDEEP

      1536:tOKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+1YW/ESKQHS1yXJFa5etiv:AKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMJ

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks