General

  • Target

    ba65bf49ab4c116a48fe426b1c8bf56120b2dd566da86094402c9e7f778685eb

  • Size

    70KB

  • Sample

    241120-1lg3davcnl

  • MD5

    1efe92187117c1b40ed7faa86164c04e

  • SHA1

    abd76bfe45ee3109e3ea329e3c7013b91920d279

  • SHA256

    ba65bf49ab4c116a48fe426b1c8bf56120b2dd566da86094402c9e7f778685eb

  • SHA512

    cba0ef87c09fef3540ea61d92c33d8b813a060b7dee610157f38543392145d8e6eb282320ae8c26eb36392eaff482a2dabd1f15cd1ff1225bf54ab9ca6080187

  • SSDEEP

    1536:tOKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+1YW/ESKQHS1yXJFa5etSv:AKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM5

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://congtycamvinh.com/plugins/jG3iqpQaTL1TXYMolH/

xlm40.dropper

http://ecube.com.mx/e2oCWBnC/6wp2K4sfQmVIRy6ZvdiH/

xlm40.dropper

http://dulichdichvu.net/libraries/6vhzwoZoNDSMtSC/

xlm40.dropper

http://gnif.org/administrator/G68HwUGlKNJNU2vh5cz/

xlm40.dropper

https://edoraseguros.com.br/cgi-bin/l7ZERv5deNsfzlZUZ/

xlm40.dropper

https://sanoma.allrent.nl/cgi-bin/KXbI5OhLJ/

Targets

    • Target

      ba65bf49ab4c116a48fe426b1c8bf56120b2dd566da86094402c9e7f778685eb

    • Size

      70KB

    • MD5

      1efe92187117c1b40ed7faa86164c04e

    • SHA1

      abd76bfe45ee3109e3ea329e3c7013b91920d279

    • SHA256

      ba65bf49ab4c116a48fe426b1c8bf56120b2dd566da86094402c9e7f778685eb

    • SHA512

      cba0ef87c09fef3540ea61d92c33d8b813a060b7dee610157f38543392145d8e6eb282320ae8c26eb36392eaff482a2dabd1f15cd1ff1225bf54ab9ca6080187

    • SSDEEP

      1536:tOKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+1YW/ESKQHS1yXJFa5etSv:AKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM5

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks