General

  • Target

    900554ea88fc0a7e0130660897ce1c8112b68a09ea4c382edb350c63cb29686b

  • Size

    101KB

  • Sample

    241120-pvw24swgna

  • MD5

    9ec6cbc4dfce17fc65e8041bd72d8807

  • SHA1

    6319b10b1144582b5e95fbd5a99bde74ca61e4af

  • SHA256

    900554ea88fc0a7e0130660897ce1c8112b68a09ea4c382edb350c63cb29686b

  • SHA512

    5ea1a50eae000bdd40904d0c98ce135533d3433b25ce1382650b43be56779e259ffcf67ad2a6741d7e617fe5397a64fa7ca888a9c2fdda431cd5d3b8730e5b81

  • SSDEEP

    3072:RKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+/bOZzbqkn6RND9fxuss8OG:RKpb8rGYrMPe3q7Q0XV5xtuE8vG8UM+/

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://decorusfinancial.com/wp-content/7dODakeZZ83fJi/

xlm40.dropper

https://e-kinerja.ntbprov.go.id/aset/sAeaEvaSxGhvnsuFE/

xlm40.dropper

http://facts-jo.com/init/jLQY2FpesnIGi0qHqz/

xlm40.dropper

http://fashionbyprincessmelodicaah.com/4185PINT/jwh2cwjFHLZL/

xlm40.dropper

http://easiercommunications.com/wp-content/yqNxi8IKbRIt7akB/

Targets

    • Target

      900554ea88fc0a7e0130660897ce1c8112b68a09ea4c382edb350c63cb29686b

    • Size

      101KB

    • MD5

      9ec6cbc4dfce17fc65e8041bd72d8807

    • SHA1

      6319b10b1144582b5e95fbd5a99bde74ca61e4af

    • SHA256

      900554ea88fc0a7e0130660897ce1c8112b68a09ea4c382edb350c63cb29686b

    • SHA512

      5ea1a50eae000bdd40904d0c98ce135533d3433b25ce1382650b43be56779e259ffcf67ad2a6741d7e617fe5397a64fa7ca888a9c2fdda431cd5d3b8730e5b81

    • SSDEEP

      3072:RKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+/bOZzbqkn6RND9fxuss8OG:RKpb8rGYrMPe3q7Q0XV5xtuE8vG8UM+/

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks