General

  • Target

    d71a8b835234e34cbde950b55a9f8e0bca2b206396724221c5dc101327f9082f

  • Size

    46KB

  • Sample

    241120-1rjhdstqet

  • MD5

    7b5c7b61a62e8853941faf2a278765f3

  • SHA1

    8956293547a6755d4a939bb1fd1481cb83dbf4cf

  • SHA256

    d71a8b835234e34cbde950b55a9f8e0bca2b206396724221c5dc101327f9082f

  • SHA512

    1f685b577a5f15ee4c7e68dc77b6fb3808e22140a7ffa3e35060b0e8f271fd769f6e52a003c3d1bcc74b9190c9b8260eb64195b4f75f3a7b427cae427185f46c

  • SSDEEP

    768:pDMPKpb8rGYrMPe3q7Q0XV5xtezE8vpI8UM+VgTBs7QqvZQ4tsdurL:pYKpb8rGYrMPe3q7Q0XV5xtezE8vG8UL

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://202.29.80.55/2021/z/

xlm40.dropper

http://23.239.12.243/dealspot/SvebxVmFucz/

xlm40.dropper

https://adviceme.gr/test/SSzbOkk633/

Targets

    • Target

      d71a8b835234e34cbde950b55a9f8e0bca2b206396724221c5dc101327f9082f

    • Size

      46KB

    • MD5

      7b5c7b61a62e8853941faf2a278765f3

    • SHA1

      8956293547a6755d4a939bb1fd1481cb83dbf4cf

    • SHA256

      d71a8b835234e34cbde950b55a9f8e0bca2b206396724221c5dc101327f9082f

    • SHA512

      1f685b577a5f15ee4c7e68dc77b6fb3808e22140a7ffa3e35060b0e8f271fd769f6e52a003c3d1bcc74b9190c9b8260eb64195b4f75f3a7b427cae427185f46c

    • SSDEEP

      768:pDMPKpb8rGYrMPe3q7Q0XV5xtezE8vpI8UM+VgTBs7QqvZQ4tsdurL:pYKpb8rGYrMPe3q7Q0XV5xtezE8vG8UL

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks