General

  • Target

    622c13931804d23989afdac6bed1939ae87a5a6f7af4f1fabe41e7b7548a0ff1

  • Size

    47KB

  • Sample

    241120-qqz4msxncs

  • MD5

    3e45f81a3c79e4f1852e6bd98c5a1056

  • SHA1

    a542bb75cf1522cdedd8555be66c5c2908fde6d7

  • SHA256

    622c13931804d23989afdac6bed1939ae87a5a6f7af4f1fabe41e7b7548a0ff1

  • SHA512

    9d2a86625028346e15649d8107132eb34eaa792fab3bc166344bd40d96b26b1d81ce4ec71d12d699d721a61610ecef1390f904ba597e2ec56fcb2ea0933dbbd1

  • SSDEEP

    768:4DM52tfQXi8vgLZkTOHkQT51Vp6AwPdM8gQ6JT5X6DGwUdh+pqjeSLjcvLtzrxFm:462tfQXi8vgLZkTOHkQT51Vp6AwPe8gz

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://www.escueladecinemza.com.ar/_installation/IBlj/

Targets

    • Target

      622c13931804d23989afdac6bed1939ae87a5a6f7af4f1fabe41e7b7548a0ff1

    • Size

      47KB

    • MD5

      3e45f81a3c79e4f1852e6bd98c5a1056

    • SHA1

      a542bb75cf1522cdedd8555be66c5c2908fde6d7

    • SHA256

      622c13931804d23989afdac6bed1939ae87a5a6f7af4f1fabe41e7b7548a0ff1

    • SHA512

      9d2a86625028346e15649d8107132eb34eaa792fab3bc166344bd40d96b26b1d81ce4ec71d12d699d721a61610ecef1390f904ba597e2ec56fcb2ea0933dbbd1

    • SSDEEP

      768:4DM52tfQXi8vgLZkTOHkQT51Vp6AwPdM8gQ6JT5X6DGwUdh+pqjeSLjcvLtzrxFm:462tfQXi8vgLZkTOHkQT51Vp6AwPe8gz

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks