General

  • Target

    e849a69f4d57bc77d96e0834ca9a0fbda95684336ad192bbaf016a9d9971800d

  • Size

    70KB

  • Sample

    241119-nj6lqsvfmf

  • MD5

    5871fa3c918279d500b5d2342d0b0397

  • SHA1

    c74051e43c268a2ce027edfa82007ea76d1711a7

  • SHA256

    e849a69f4d57bc77d96e0834ca9a0fbda95684336ad192bbaf016a9d9971800d

  • SHA512

    5f5d69b3b40bbf28a6499c3edc57fee86decb28caa8f28df598e32df033560ce4ead1628aa379c88dbcf24d4a6134f08a2f3c32bbc49a0e823391185bb719873

  • SSDEEP

    1536:5+Kpb8rGYrMPe3q7Q0XV5xtezEsi8/dgAYW/ESKQHS1yXJFadK0ZB:kKpb8rGYrMPe3q7Q0XV5xtezEsi8/dg7

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://farschid.de/verkaufsberater_service/OZRw36a2y1CH2clUzY/

xlm40.dropper

http://77homolog.com.br/dev-jealves/GP55wbYNXnp6/

xlm40.dropper

http://geowf.ge/templates/pJRea3Iu3wG/

xlm40.dropper

http://h63402x4.beget.tech/bin/wl0ENiE3BhELXV6V/

xlm40.dropper

http://ecoarch.com.tw/cgi-bin/E/

xlm40.dropper

https://galaxy-catering.com.vn/galxy/Fg1vvhlYJ/

Targets

    • Target

      e849a69f4d57bc77d96e0834ca9a0fbda95684336ad192bbaf016a9d9971800d

    • Size

      70KB

    • MD5

      5871fa3c918279d500b5d2342d0b0397

    • SHA1

      c74051e43c268a2ce027edfa82007ea76d1711a7

    • SHA256

      e849a69f4d57bc77d96e0834ca9a0fbda95684336ad192bbaf016a9d9971800d

    • SHA512

      5f5d69b3b40bbf28a6499c3edc57fee86decb28caa8f28df598e32df033560ce4ead1628aa379c88dbcf24d4a6134f08a2f3c32bbc49a0e823391185bb719873

    • SSDEEP

      1536:5+Kpb8rGYrMPe3q7Q0XV5xtezEsi8/dgAYW/ESKQHS1yXJFadK0ZB:kKpb8rGYrMPe3q7Q0XV5xtezEsi8/dg7

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks