General

  • Target

    f8681f024211d9f11778041d42d8021939fc529d931a44a0340c20b1cddb56f7

  • Size

    70KB

  • Sample

    241120-19qz7athng

  • MD5

    17a1900903d0e713e4531a0815838832

  • SHA1

    cc81f00a4334196ef5e5963f38c6d09c31c6878b

  • SHA256

    f8681f024211d9f11778041d42d8021939fc529d931a44a0340c20b1cddb56f7

  • SHA512

    5c42cfebccba442c4127fe93a3a8e3579b524387fc30dc3f95ca9462b58f3482eb4612981c88ec34db8c9feacc29b4e183e9c68dddeb95ce5b1659d8a5582591

  • SSDEEP

    1536:OhKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+KJ+hDcnTLiQrRTZws8EI:uKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMG

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://sacvasanth.com/public/lyP2lh1hlJr/

xlm40.dropper

https://webguruindia.com/theme/wTbEyLVvMNB3j/

xlm40.dropper

http://stockmorehouse.com/Casa_Grande/AS4VPkTsOqWDGGO/

Targets

    • Target

      f8681f024211d9f11778041d42d8021939fc529d931a44a0340c20b1cddb56f7

    • Size

      70KB

    • MD5

      17a1900903d0e713e4531a0815838832

    • SHA1

      cc81f00a4334196ef5e5963f38c6d09c31c6878b

    • SHA256

      f8681f024211d9f11778041d42d8021939fc529d931a44a0340c20b1cddb56f7

    • SHA512

      5c42cfebccba442c4127fe93a3a8e3579b524387fc30dc3f95ca9462b58f3482eb4612981c88ec34db8c9feacc29b4e183e9c68dddeb95ce5b1659d8a5582591

    • SSDEEP

      1536:OhKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+KJ+hDcnTLiQrRTZws8EI:uKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMG

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks