General

  • Target

    3ff051da2ebd61190b24443cb2855914ec44d6d00875bc09a06330e360bdea42

  • Size

    101KB

  • Sample

    241120-nfzzsawapa

  • MD5

    a87829c54e596337cf72f2068151094a

  • SHA1

    d522751fddd7a148a090c4783bcf8d63501bab00

  • SHA256

    3ff051da2ebd61190b24443cb2855914ec44d6d00875bc09a06330e360bdea42

  • SHA512

    293df2f218e6ddbff7abb376f85cef9774f364eb7db31424e4c364c1c17cffb0824230cdac96d0407feda2b1fbf13df08edf1f76a3b5c0921a583cc8b60c001c

  • SSDEEP

    3072:RKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+/bOZzbqkn6RND9fxuss8OG:RKpb8rGYrMPe3q7Q0XV5xtuE8vG8UM+/

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://decorusfinancial.com/wp-content/7dODakeZZ83fJi/

xlm40.dropper

https://e-kinerja.ntbprov.go.id/aset/sAeaEvaSxGhvnsuFE/

xlm40.dropper

http://facts-jo.com/init/jLQY2FpesnIGi0qHqz/

xlm40.dropper

http://fashionbyprincessmelodicaah.com/4185PINT/jwh2cwjFHLZL/

xlm40.dropper

http://easiercommunications.com/wp-content/yqNxi8IKbRIt7akB/

Targets

    • Target

      3ff051da2ebd61190b24443cb2855914ec44d6d00875bc09a06330e360bdea42

    • Size

      101KB

    • MD5

      a87829c54e596337cf72f2068151094a

    • SHA1

      d522751fddd7a148a090c4783bcf8d63501bab00

    • SHA256

      3ff051da2ebd61190b24443cb2855914ec44d6d00875bc09a06330e360bdea42

    • SHA512

      293df2f218e6ddbff7abb376f85cef9774f364eb7db31424e4c364c1c17cffb0824230cdac96d0407feda2b1fbf13df08edf1f76a3b5c0921a583cc8b60c001c

    • SSDEEP

      3072:RKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+/bOZzbqkn6RND9fxuss8OG:RKpb8rGYrMPe3q7Q0XV5xtuE8vG8UM+/

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks