General

  • Target

    311249be8276bf71e1ae9206c77548b47503ef3627d0e0b34470665c420246a1

  • Size

    40KB

  • Sample

    241120-3cpf7szpdj

  • MD5

    aa54b63b504747242d670f9213981da6

  • SHA1

    c7fa27adbcbe3f54a50e3709c1c288aad10243b6

  • SHA256

    311249be8276bf71e1ae9206c77548b47503ef3627d0e0b34470665c420246a1

  • SHA512

    5ff34f6e9038e64f0c75fc8b05f79e789db28a0d4986fd150223e5ad2ed861a0acbccba22b93ec3df78bdd36a84e4b6accee492e4cb010ae51c24ff0e042d941

  • SSDEEP

    768:pkZKpb8rGYrMPe3q7Q0XV5xtezEs/68/dgACCBn9kC+xbwcZfqG9tMvcVi1ls:p+Kpb8rGYrMPe3q7Q0XV5xtezEsi8/d0

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://easiercommunications.com/wp-content/w/

xlm40.dropper

http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/

xlm40.dropper

https://www.whow.fr/wp-includes/H54Fgj0tG/

xlm40.dropper

http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/

xlm40.dropper

http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/

xlm40.dropper

http://goonboy.com/goonie/bSFz7Av/

Targets

    • Target

      311249be8276bf71e1ae9206c77548b47503ef3627d0e0b34470665c420246a1

    • Size

      40KB

    • MD5

      aa54b63b504747242d670f9213981da6

    • SHA1

      c7fa27adbcbe3f54a50e3709c1c288aad10243b6

    • SHA256

      311249be8276bf71e1ae9206c77548b47503ef3627d0e0b34470665c420246a1

    • SHA512

      5ff34f6e9038e64f0c75fc8b05f79e789db28a0d4986fd150223e5ad2ed861a0acbccba22b93ec3df78bdd36a84e4b6accee492e4cb010ae51c24ff0e042d941

    • SSDEEP

      768:pkZKpb8rGYrMPe3q7Q0XV5xtezEs/68/dgACCBn9kC+xbwcZfqG9tMvcVi1ls:p+Kpb8rGYrMPe3q7Q0XV5xtezEsi8/d0

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks