General

  • Target

    c3876d57023d7b66ae9fbcafb9d5c63e0773e0fbf9e0bb9de00684ed9da9235d

  • Size

    70KB

  • Sample

    241120-mex85avepa

  • MD5

    852beecbf409a276e34a5acea0c56212

  • SHA1

    699f92725a78625fc7ff02ed81f1916aff175d9c

  • SHA256

    c3876d57023d7b66ae9fbcafb9d5c63e0773e0fbf9e0bb9de00684ed9da9235d

  • SHA512

    fb19fbf4a34f04faf8633df978fd379fd408121076d20a932d1d085f422e04e5fbe04c097b6766b824f8ed4c3e3984d6ad306a1198b60450c992cfd4bab4d664

  • SSDEEP

    1536:tOKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+1YW/ESKQHS1yXJFa5etSv:AKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM5

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://congtycamvinh.com/plugins/jG3iqpQaTL1TXYMolH/

xlm40.dropper

http://ecube.com.mx/e2oCWBnC/6wp2K4sfQmVIRy6ZvdiH/

xlm40.dropper

http://dulichdichvu.net/libraries/6vhzwoZoNDSMtSC/

xlm40.dropper

http://gnif.org/administrator/G68HwUGlKNJNU2vh5cz/

xlm40.dropper

https://edoraseguros.com.br/cgi-bin/l7ZERv5deNsfzlZUZ/

xlm40.dropper

https://sanoma.allrent.nl/cgi-bin/KXbI5OhLJ/

Targets

    • Target

      c3876d57023d7b66ae9fbcafb9d5c63e0773e0fbf9e0bb9de00684ed9da9235d

    • Size

      70KB

    • MD5

      852beecbf409a276e34a5acea0c56212

    • SHA1

      699f92725a78625fc7ff02ed81f1916aff175d9c

    • SHA256

      c3876d57023d7b66ae9fbcafb9d5c63e0773e0fbf9e0bb9de00684ed9da9235d

    • SHA512

      fb19fbf4a34f04faf8633df978fd379fd408121076d20a932d1d085f422e04e5fbe04c097b6766b824f8ed4c3e3984d6ad306a1198b60450c992cfd4bab4d664

    • SSDEEP

      1536:tOKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+1YW/ESKQHS1yXJFa5etSv:AKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM5

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks