General

  • Target

    5cc68c2f1eff8312f9f6b0fa2de5568cdb3a53dbc28af045d20add45b07306a6

  • Size

    95KB

  • Sample

    241120-14h3dsvjfy

  • MD5

    2777ae5b274350736854aba8dc99d622

  • SHA1

    2610d5c95954ec6a8c74c40899c1a886532bc43e

  • SHA256

    5cc68c2f1eff8312f9f6b0fa2de5568cdb3a53dbc28af045d20add45b07306a6

  • SHA512

    abb27b8064c2d2e6ce82b8f81c357826463095ca882aa81aaae0ab99aba2d9a28c28898f10027e459a4c64a93fd6c61395ff03a993877efe81d026d3437b43ac

  • SSDEEP

    1536:UkKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgNHuS4hcTO97v7UYdEJml:bKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgI

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://fikti.bem.gunadarma.ac.id/SDM/YH8OJ1Zz8miBX/

xlm40.dropper

http://ebuysa.co.za/yt-assets/yZ30/

xlm40.dropper

http://3dstudioa.com.br/files/1ubPAB/

xlm40.dropper

http://boardmart.co.za/images/DvMHPbTLn/

Targets

    • Target

      5cc68c2f1eff8312f9f6b0fa2de5568cdb3a53dbc28af045d20add45b07306a6

    • Size

      95KB

    • MD5

      2777ae5b274350736854aba8dc99d622

    • SHA1

      2610d5c95954ec6a8c74c40899c1a886532bc43e

    • SHA256

      5cc68c2f1eff8312f9f6b0fa2de5568cdb3a53dbc28af045d20add45b07306a6

    • SHA512

      abb27b8064c2d2e6ce82b8f81c357826463095ca882aa81aaae0ab99aba2d9a28c28898f10027e459a4c64a93fd6c61395ff03a993877efe81d026d3437b43ac

    • SSDEEP

      1536:UkKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgNHuS4hcTO97v7UYdEJml:bKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgI

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks