General
- Target 0ef08095b9ef39787a7f00e186fbc9cb2a9aa82bdbe56c0577b65be35fb83708
- Size 78KB
- Sample241120-1527natgrb
- SHA256 0ef08095b9ef39787a7f00e186fbc9cb2a9aa82bdbe56c0577b65be35fb83708
- MD5 118ae5a49bdcd0dfd675bab78b968828
- SHA1 b1a24c85e541eb06174805a212481fce887362d7
- SHA512 bdc532b477b20eb0fffebd7e573f1c4893978266348f347aef392e23f08e4179363d64fbeeca5a2889375129845ec5625e227ea3664a60ce33c765575dd48a48
- SSDEEP 1536:ZwKpb8rGYrMPe3q7Q0XV5xtezEsi8/dg+dXTZhKEw+PmYEJ8zobcW13G+8eJNfn1:CKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgX
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
0ef08095b9ef39787a7f00e186fbc9cb2a9aa82bdbe56c0577b65be35fb83708.xls
Resource
win7-20241023-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
0ef08095b9ef39787a7f00e186fbc9cb2a9aa82bdbe56c0577b65be35fb83708.xls
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Language
-
xlm4.0
Source
URLs
-
xlm40.dropper
https://hostal-alfonso12.com/clases/SKtPvv/
-
xlm40.dropper
http://howesitgoing.com/images/HyaDnlbl6K7tbh2Lugys/
-
xlm40.dropper
https://www.jdserralheria.com.br/cgi-bin/KFG6/
-
xlm40.dropper
http://inteirado.com.br/fonts/7dJCVvuE5x3YrGQs2oJz/
-
xlm40.dropper
http://iciee.untirta.ac.id/test/GccRw/
-
xlm40.dropper
https://ideoso.com.tw/cgi-bin/zLrnBd2Eg1N3UVy5yL/
Targets
-
- Target 0ef08095b9ef39787a7f00e186fbc9cb2a9aa82bdbe56c0577b65be35fb83708
- Size 78KB
- SHA256 0ef08095b9ef39787a7f00e186fbc9cb2a9aa82bdbe56c0577b65be35fb83708
- MD5 118ae5a49bdcd0dfd675bab78b968828
- SHA1 b1a24c85e541eb06174805a212481fce887362d7
- SHA512 bdc532b477b20eb0fffebd7e573f1c4893978266348f347aef392e23f08e4179363d64fbeeca5a2889375129845ec5625e227ea3664a60ce33c765575dd48a48
- SSDEEP 1536:ZwKpb8rGYrMPe3q7Q0XV5xtezEsi8/dg+dXTZhKEw+PmYEJ8zobcW13G+8eJNfn1:CKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgX
- MD5 SHA1 SHA512 SSDEEP
Score10/10