General

  • Target

    c371f28a3aca9f24abdce52e87e4a1207cb91646ad146a7d52407ba789eb2f11

  • Size

    126KB

  • Sample

    241120-nf95rawgpp

  • MD5

    6c4ddbadca788ec6c4ddc397cd484a8f

  • SHA1

    0e0ce3b7fb3ad42316e8585e0271d08a2639e691

  • SHA256

    c371f28a3aca9f24abdce52e87e4a1207cb91646ad146a7d52407ba789eb2f11

  • SHA512

    7b7076f581b2f70438b1b77f447b4846edf3f64468f6f50becf8d63a5ae3828c2887d4f78e1719aa81679d3c97a9340132d6d9e79fe30bc5c768a8c7f4300e5e

  • SSDEEP

    3072:EsKpbdrHYrMue8q7QPX+5xtekEdi8/dgj3Siz+3z4Icu6hlCI:7KpbdrHYrMue8q7QPX+5xtFEdi8/dgjZ

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://www.forensisbilisim.com/ankara/bplsmKfaKAwAyavNj/

xlm40.dropper

https://www.faitmaison.uk/wp-admin/BZMoK/

xlm40.dropper

http://www.fahriefe.com.tr/yargitaykararlari/aVg/

xlm40.dropper

http://www.parapetyrs.cz/wp-content/uploads/UTnG7GKKkZf/

xlm40.dropper

https://www.whow.fr/wp-includes/aZo78JmHBoEmW6fVQ/

xlm40.dropper

http://www.drcno.sk/_sub/FcEgwPugDI7wr2/

Targets

    • Target

      c371f28a3aca9f24abdce52e87e4a1207cb91646ad146a7d52407ba789eb2f11

    • Size

      126KB

    • MD5

      6c4ddbadca788ec6c4ddc397cd484a8f

    • SHA1

      0e0ce3b7fb3ad42316e8585e0271d08a2639e691

    • SHA256

      c371f28a3aca9f24abdce52e87e4a1207cb91646ad146a7d52407ba789eb2f11

    • SHA512

      7b7076f581b2f70438b1b77f447b4846edf3f64468f6f50becf8d63a5ae3828c2887d4f78e1719aa81679d3c97a9340132d6d9e79fe30bc5c768a8c7f4300e5e

    • SSDEEP

      3072:EsKpbdrHYrMue8q7QPX+5xtekEdi8/dgj3Siz+3z4Icu6hlCI:7KpbdrHYrMue8q7QPX+5xtFEdi8/dgjZ

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks