General

  • Target

    58dc0ceba7d8b2165aa8552d498b7a2aaa5141e5b21c39c257a749f357d3f3b4

  • Size

    70KB

  • Sample

    241120-p8p6qaxkgx

  • MD5

    ce9e70742917124e36de1d61ef82c19e

  • SHA1

    665f983e7fcfcb928eba971325e79ed9b6da5ae3

  • SHA256

    58dc0ceba7d8b2165aa8552d498b7a2aaa5141e5b21c39c257a749f357d3f3b4

  • SHA512

    e34e35be7459760492d145c1bd023752e5d28993747b1cc5c343ec0dd15e8014e33706de3d8713f291cbc3f207fc59781d23e3743f005b524e4b1a3f9829b6bf

  • SSDEEP

    1536:tOKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+1YW/ESKQHS1yXJFa5etiv:AKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMJ

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://congtycamvinh.com/plugins/jG3iqpQaTL1TXYMolH/

xlm40.dropper

http://ecube.com.mx/e2oCWBnC/6wp2K4sfQmVIRy6ZvdiH/

xlm40.dropper

http://dulichdichvu.net/libraries/6vhzwoZoNDSMtSC/

xlm40.dropper

http://gnif.org/administrator/G68HwUGlKNJNU2vh5cz/

xlm40.dropper

https://edoraseguros.com.br/cgi-bin/l7ZERv5deNsfzlZUZ/

xlm40.dropper

https://sanoma.allrent.nl/cgi-bin/KXbI5OhLJ/

Targets

    • Target

      58dc0ceba7d8b2165aa8552d498b7a2aaa5141e5b21c39c257a749f357d3f3b4

    • Size

      70KB

    • MD5

      ce9e70742917124e36de1d61ef82c19e

    • SHA1

      665f983e7fcfcb928eba971325e79ed9b6da5ae3

    • SHA256

      58dc0ceba7d8b2165aa8552d498b7a2aaa5141e5b21c39c257a749f357d3f3b4

    • SHA512

      e34e35be7459760492d145c1bd023752e5d28993747b1cc5c343ec0dd15e8014e33706de3d8713f291cbc3f207fc59781d23e3743f005b524e4b1a3f9829b6bf

    • SSDEEP

      1536:tOKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+1YW/ESKQHS1yXJFa5etiv:AKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMJ

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks