General

  • Target

    b2bca23e6a498ac26af5b12533adc2b5650f277e99bd4327355f0708fb863036

  • Size

    70KB

  • Sample

    241120-qcrv4sxfpp

  • MD5

    26c57028eced8e9163734c1b964ffab5

  • SHA1

    a42fd40e565eb19121b2e5bcc6973cb54488e8d2

  • SHA256

    b2bca23e6a498ac26af5b12533adc2b5650f277e99bd4327355f0708fb863036

  • SHA512

    05f1fb406278d0cc6d843bd5d60a3155931691a9ad65d0f3a2892ed70ffb3fac9747e8c3fe66bf4a10f5870a8c25a9bca967f31f1ffe36c645de68507b91753c

  • SSDEEP

    1536:OhKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+KJ+hDcnTLiQrRTZws8Eo:uKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM2

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://sacvasanth.com/public/lyP2lh1hlJr/

xlm40.dropper

https://webguruindia.com/theme/wTbEyLVvMNB3j/

xlm40.dropper

http://stockmorehouse.com/Casa_Grande/AS4VPkTsOqWDGGO/

Targets

    • Target

      b2bca23e6a498ac26af5b12533adc2b5650f277e99bd4327355f0708fb863036

    • Size

      70KB

    • MD5

      26c57028eced8e9163734c1b964ffab5

    • SHA1

      a42fd40e565eb19121b2e5bcc6973cb54488e8d2

    • SHA256

      b2bca23e6a498ac26af5b12533adc2b5650f277e99bd4327355f0708fb863036

    • SHA512

      05f1fb406278d0cc6d843bd5d60a3155931691a9ad65d0f3a2892ed70ffb3fac9747e8c3fe66bf4a10f5870a8c25a9bca967f31f1ffe36c645de68507b91753c

    • SSDEEP

      1536:OhKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+KJ+hDcnTLiQrRTZws8Eo:uKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM2

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks