General

  • Target

    926a6f8e494ed213f384ca38df166dbdd33b4559c8086b7e9d4d7296e1ea963c

  • Size

    70KB

  • Sample

    241120-m972tazrak

  • MD5

    11b401ef63cd508bf8f46055b74eb829

  • SHA1

    707481cf53fbaa2edcfc0f105c7070a587c9ee7d

  • SHA256

    926a6f8e494ed213f384ca38df166dbdd33b4559c8086b7e9d4d7296e1ea963c

  • SHA512

    58557e5b29def36111f7d20392a6cda358aa35588d8af9696d25ae7bfde88808b24d2eda021c9ec820da38957a7bc5304cf017c62ab125edd39eabbdbd9ef2fe

  • SSDEEP

    1536:tOKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+1YW/ESKQHS1yXJFa5etmv:AKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMN

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://congtycamvinh.com/plugins/jG3iqpQaTL1TXYMolH/

xlm40.dropper

http://ecube.com.mx/e2oCWBnC/6wp2K4sfQmVIRy6ZvdiH/

xlm40.dropper

http://dulichdichvu.net/libraries/6vhzwoZoNDSMtSC/

xlm40.dropper

http://gnif.org/administrator/G68HwUGlKNJNU2vh5cz/

xlm40.dropper

https://edoraseguros.com.br/cgi-bin/l7ZERv5deNsfzlZUZ/

xlm40.dropper

https://sanoma.allrent.nl/cgi-bin/KXbI5OhLJ/

Targets

    • Target

      926a6f8e494ed213f384ca38df166dbdd33b4559c8086b7e9d4d7296e1ea963c

    • Size

      70KB

    • MD5

      11b401ef63cd508bf8f46055b74eb829

    • SHA1

      707481cf53fbaa2edcfc0f105c7070a587c9ee7d

    • SHA256

      926a6f8e494ed213f384ca38df166dbdd33b4559c8086b7e9d4d7296e1ea963c

    • SHA512

      58557e5b29def36111f7d20392a6cda358aa35588d8af9696d25ae7bfde88808b24d2eda021c9ec820da38957a7bc5304cf017c62ab125edd39eabbdbd9ef2fe

    • SSDEEP

      1536:tOKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+1YW/ESKQHS1yXJFa5etmv:AKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMN

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks