0988002a8d16362c3541fc1abe1e7e0f2e2c2ff1a48299790a1ee5c83d4d5900 | Triage

Sharing

General

Target

0988002a8d16362c3541fc1abe1e7e0f2e2c2ff1a48299790a1ee5c83d4d5900
Size

217KB
Sample

241120-d7f1wa1bpn
MD5

d77a42fe35ac661116b46a4e261f9a09
SHA1

9651e749c24ba6d59bc44c6b5247f3c20be7f22a
SHA256

0988002a8d16362c3541fc1abe1e7e0f2e2c2ff1a48299790a1ee5c83d4d5900
SHA512

fe9b781656d170b86ce01818c4b4d4799393369f32e9f14c68144ea54c94771616b1088c2eca30c344d668611d8b56aa84aa58259c5a87237e1743577a3aa359
SSDEEP

6144:zKpb8rGYrMPe3q7Q0XV5xtuEsi8/dglyY+TAQXTHGUMEyP5p6f5jQm7pnT:1bGUMVWlbZ

Score

10^/10

discovery macro xlm

Malware Config

Extracted

Language

xlm4.0

Source

URLs

xlm40.dropper

http://app.clubdedocentes.com/storage/DCcq9ekgH99sI/

xlm40.dropper

http://linhkiendoc.com/app/payments/qoy5JqpLqrbsKl/

xlm40.dropper

http://sourcecool.com/throng/iOD/

xlm40.dropper

http://www.stickers-et-deco.com/Adapter/lYw/

Targets

- Target
  
  0988002a8d16362c3541fc1abe1e7e0f2e2c2ff1a48299790a1ee5c83d4d5900
- Size
  
  217KB
- MD5
  
  d77a42fe35ac661116b46a4e261f9a09
- SHA1
  
  9651e749c24ba6d59bc44c6b5247f3c20be7f22a
- SHA256
  
  0988002a8d16362c3541fc1abe1e7e0f2e2c2ff1a48299790a1ee5c83d4d5900
- SHA512
  
  fe9b781656d170b86ce01818c4b4d4799393369f32e9f14c68144ea54c94771616b1088c2eca30c344d668611d8b56aa84aa58259c5a87237e1743577a3aa359
- SSDEEP
  
  6144:zKpb8rGYrMPe3q7Q0XV5xtuEsi8/dglyY+TAQXTHGUMEyP5p6f5jQm7pnT:1bGUMVWlbZ
Score

10^/10

discovery
- Process spawned unexpected child process
  This typically indicates the parent process was compromised via an exploit or macro.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2