General

  • Target

    6365e0269924253f6b1c679d4e3a083b27b40eea37dc635b4fd7f476ca97b32d

  • Size

    91KB

  • Sample

    241120-cvfnxatjgl

  • MD5

    2d0a8c1c93547729e38763ba9877537d

  • SHA1

    6bc2089572454c78aa782b493ecf35c6c489c72b

  • SHA256

    6365e0269924253f6b1c679d4e3a083b27b40eea37dc635b4fd7f476ca97b32d

  • SHA512

    1d1933d1883586d9e8a3139806351b607fafeb12f390a3430607538c7ab463d37302593159384c912653b8d7ce320e53c68f6d20fac54a36ec6c34c3ad648b1d

  • SSDEEP

    1536:eKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgCbCXuZH4gb4CEn9J4ZiL5:eKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgp

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://helpeve.com/wp-admin/sOdeuF1c4DV2h/

xlm40.dropper

http://christplanet.com/wp-admin/maint/mtlsi/TxsAE7TAAb/

xlm40.dropper

http://www.chawkyfrenn.com/icon/LRWYSefRL7/

xlm40.dropper

http://chist.com/dir-/N5zALqqTmf/

Targets

    • Target

      6365e0269924253f6b1c679d4e3a083b27b40eea37dc635b4fd7f476ca97b32d

    • Size

      91KB

    • MD5

      2d0a8c1c93547729e38763ba9877537d

    • SHA1

      6bc2089572454c78aa782b493ecf35c6c489c72b

    • SHA256

      6365e0269924253f6b1c679d4e3a083b27b40eea37dc635b4fd7f476ca97b32d

    • SHA512

      1d1933d1883586d9e8a3139806351b607fafeb12f390a3430607538c7ab463d37302593159384c912653b8d7ce320e53c68f6d20fac54a36ec6c34c3ad648b1d

    • SSDEEP

      1536:eKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgCbCXuZH4gb4CEn9J4ZiL5:eKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgp

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks