General

  • Target

    7073604ae2d03559f9caa9adef2058a08324cc70be118b597c2850102795f755

  • Size

    108KB

  • Sample

    241120-kvbnysveqk

  • MD5

    5dcd34aacfc5019d7d68fa28e946f1f6

  • SHA1

    5eeb3f37e3eb1a74ef39536d8ca6f2de41c5ab50

  • SHA256

    7073604ae2d03559f9caa9adef2058a08324cc70be118b597c2850102795f755

  • SHA512

    142464d80f04c9f52a54e9813a15ea3793dd9fd481e831581ddd3a116ebde49c2666edc9c6c48a07c3a92c73abac371e80f4b34510ca2fb238c568895465784c

  • SSDEEP

    3072:+C+nBqmxk3hbdlylKsgqopeJBWhZFGkE+cMLxAAIFxe53lGvFTQ3IzxgdrvxpU0O:R+nBqmxk3hbdlylKsgqopeJBWhZFVE+s

Score
10/10

Malware Config

Extracted

Language
hta
Source
URLs
hta.dropper

http://185.7.214.7/fer/fe4.html

Targets

    • Target

      7073604ae2d03559f9caa9adef2058a08324cc70be118b597c2850102795f755

    • Size

      108KB

    • MD5

      5dcd34aacfc5019d7d68fa28e946f1f6

    • SHA1

      5eeb3f37e3eb1a74ef39536d8ca6f2de41c5ab50

    • SHA256

      7073604ae2d03559f9caa9adef2058a08324cc70be118b597c2850102795f755

    • SHA512

      142464d80f04c9f52a54e9813a15ea3793dd9fd481e831581ddd3a116ebde49c2666edc9c6c48a07c3a92c73abac371e80f4b34510ca2fb238c568895465784c

    • SSDEEP

      3072:+C+nBqmxk3hbdlylKsgqopeJBWhZFGkE+cMLxAAIFxe53lGvFTQ3IzxgdrvxpU0O:R+nBqmxk3hbdlylKsgqopeJBWhZFVE+s

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks