Overview

overview

10

Static

static

8

e1e5ad1208...25.xls

windows7-x64

10

e1e5ad1208...25.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1e5ad12086aebe2ac29fad9d1b4da7ca2c182845162228f9651d0def1d5f625

  • Size

    118KB

  • Sample

    241120-1v24xaynhl

  • MD5

    6be6abb9b38a378ce0d2b2377bd71da1

  • SHA1

    f68dd2ce6a4634bf70d0400979a46efd0defb8ae

  • SHA256

    e1e5ad12086aebe2ac29fad9d1b4da7ca2c182845162228f9651d0def1d5f625

  • SHA512

    99601f2fefb0f5f46b2598391d6dd4e9d77ef83eefa24b019db67837d0bdfa834ab8369ef5cc8bc97fbcd44a7c815adec10a3f6731a8962c7e53779aa40da19a

  • SSDEEP

    3072:bKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgtlyVEdBU6hubsll6UQjvxe:bKpb8rGYrMPe3q7Q0XV5xtuEsi8/dgjf

Score
10/10
discoverymacroxlm

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://wordpressdes.vanzolini-gte.org.br/fundacaotelefonica.org.br/gAbC4QpJYI/
xlm40.dropper

http://shopnhap.com/highbinder/nnYko9FDNJ/
xlm40.dropper

http://txingame.com/wp-content/PwKfVQfdhHbAv2j/

Targets

    • Target

      e1e5ad12086aebe2ac29fad9d1b4da7ca2c182845162228f9651d0def1d5f625

    • Size

      118KB

    • MD5

      6be6abb9b38a378ce0d2b2377bd71da1

    • SHA1

      f68dd2ce6a4634bf70d0400979a46efd0defb8ae

    • SHA256

      e1e5ad12086aebe2ac29fad9d1b4da7ca2c182845162228f9651d0def1d5f625

    • SHA512

      99601f2fefb0f5f46b2598391d6dd4e9d77ef83eefa24b019db67837d0bdfa834ab8369ef5cc8bc97fbcd44a7c815adec10a3f6731a8962c7e53779aa40da19a

    • SSDEEP

      3072:bKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgtlyVEdBU6hubsll6UQjvxe:bKpb8rGYrMPe3q7Q0XV5xtuEsi8/dgjf

    Score
    10/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks