General

  • Target

    14dee3976b86b4629de131f2edb95e356d26d94ff1a732848a3a8a7fdfbf0ddb

  • Size

    40KB

  • Sample

    241120-ms5v5awekm

  • MD5

    002613b8e05d31133fb69e9f3f69ef25

  • SHA1

    4c41ecdb8de82b0b7e39665968a295b4fd2d367b

  • SHA256

    14dee3976b86b4629de131f2edb95e356d26d94ff1a732848a3a8a7fdfbf0ddb

  • SHA512

    0366ea99eda84ad6807124dada7a95633196d21d8aee0d594100f5db295484b6f06c021439837285b10f8131997737bf613051aba0b9c73cc98662056afd863f

  • SSDEEP

    768:pkZKpb8rGYrMPe3q7Q0XV5xtezEs/68/dgACCBn9kC+xbwcZfqG9tMvcVi1l8:p+Kpb8rGYrMPe3q7Q0XV5xtezEsi8/dE

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://easiercommunications.com/wp-content/w/

xlm40.dropper

http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/

xlm40.dropper

https://www.whow.fr/wp-includes/H54Fgj0tG/

xlm40.dropper

http://genccagdas.com.tr/assets/TTHOm833iNn3BxT/

xlm40.dropper

http://heaventechnologies.com.pk/apitest/xdeAU0rx26LT9I/

xlm40.dropper

http://goonboy.com/goonie/bSFz7Av/

Targets

    • Target

      14dee3976b86b4629de131f2edb95e356d26d94ff1a732848a3a8a7fdfbf0ddb

    • Size

      40KB

    • MD5

      002613b8e05d31133fb69e9f3f69ef25

    • SHA1

      4c41ecdb8de82b0b7e39665968a295b4fd2d367b

    • SHA256

      14dee3976b86b4629de131f2edb95e356d26d94ff1a732848a3a8a7fdfbf0ddb

    • SHA512

      0366ea99eda84ad6807124dada7a95633196d21d8aee0d594100f5db295484b6f06c021439837285b10f8131997737bf613051aba0b9c73cc98662056afd863f

    • SSDEEP

      768:pkZKpb8rGYrMPe3q7Q0XV5xtezEs/68/dgACCBn9kC+xbwcZfqG9tMvcVi1l8:p+Kpb8rGYrMPe3q7Q0XV5xtezEsi8/dE

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks