General

  • Target

    919ddb4ad8dc02bc8dc4839b2dfdaa9035e74c9774abd5396524d57dc1ed50ba

  • Size

    70KB

  • Sample

    241120-lykxgavnfx

  • MD5

    0c9ef0ecf57a86268afeb0d6a6ddbf7d

  • SHA1

    dde9594efa5104734679f51bea98f2414ee84446

  • SHA256

    919ddb4ad8dc02bc8dc4839b2dfdaa9035e74c9774abd5396524d57dc1ed50ba

  • SHA512

    3a5b45e565cfefa692abc34cc22b8995d6579c65dceb39e46270a5b369e12f6c7a9b5edfdcd8616238fa650cc3c272a1b33b6f1aaffd83acb8f1f7ca476e4ef0

  • SSDEEP

    1536:5+Kpb8rGYrMPe3q7Q0XV5xtezEsi8/dgAYW/ESKQHS1yXJFadK0JB:kKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgr

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://farschid.de/verkaufsberater_service/OZRw36a2y1CH2clUzY/

xlm40.dropper

http://77homolog.com.br/dev-jealves/GP55wbYNXnp6/

xlm40.dropper

http://geowf.ge/templates/pJRea3Iu3wG/

xlm40.dropper

http://h63402x4.beget.tech/bin/wl0ENiE3BhELXV6V/

xlm40.dropper

http://ecoarch.com.tw/cgi-bin/E/

xlm40.dropper

https://galaxy-catering.com.vn/galxy/Fg1vvhlYJ/

Targets

    • Target

      919ddb4ad8dc02bc8dc4839b2dfdaa9035e74c9774abd5396524d57dc1ed50ba

    • Size

      70KB

    • MD5

      0c9ef0ecf57a86268afeb0d6a6ddbf7d

    • SHA1

      dde9594efa5104734679f51bea98f2414ee84446

    • SHA256

      919ddb4ad8dc02bc8dc4839b2dfdaa9035e74c9774abd5396524d57dc1ed50ba

    • SHA512

      3a5b45e565cfefa692abc34cc22b8995d6579c65dceb39e46270a5b369e12f6c7a9b5edfdcd8616238fa650cc3c272a1b33b6f1aaffd83acb8f1f7ca476e4ef0

    • SSDEEP

      1536:5+Kpb8rGYrMPe3q7Q0XV5xtezEsi8/dgAYW/ESKQHS1yXJFadK0JB:kKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgr

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks