General

  • Target

    d235d6576334537cccbdc55014d23bc51218d26e983e6c306bedb1400b05986b

  • Size

    126KB

  • Sample

    241120-rsyt2aydlr

  • MD5

    40975ab8948523ad5de1ef386de71dd9

  • SHA1

    221098a5c589ea7d656e7beb44aed4a41b615c57

  • SHA256

    d235d6576334537cccbdc55014d23bc51218d26e983e6c306bedb1400b05986b

  • SHA512

    6f778787f006b7ed22db70269d5ab7593c6f100ac920b2b14991dd6296f9a58eafa8d9b91b010bd22501e14b0e7a395e89e0e3dc11919c68525784c621436a74

  • SSDEEP

    3072:EsKpbdrHYrMue8q7QPX+5xtekEdi8/dgj3Siz+3z4Icu6hlCE:7KpbdrHYrMue8q7QPX+5xtFEdi8/dgjN

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://www.forensisbilisim.com/ankara/bplsmKfaKAwAyavNj/

xlm40.dropper

https://www.faitmaison.uk/wp-admin/BZMoK/

xlm40.dropper

http://www.fahriefe.com.tr/yargitaykararlari/aVg/

xlm40.dropper

http://www.parapetyrs.cz/wp-content/uploads/UTnG7GKKkZf/

xlm40.dropper

https://www.whow.fr/wp-includes/aZo78JmHBoEmW6fVQ/

xlm40.dropper

http://www.drcno.sk/_sub/FcEgwPugDI7wr2/

Targets

    • Target

      d235d6576334537cccbdc55014d23bc51218d26e983e6c306bedb1400b05986b

    • Size

      126KB

    • MD5

      40975ab8948523ad5de1ef386de71dd9

    • SHA1

      221098a5c589ea7d656e7beb44aed4a41b615c57

    • SHA256

      d235d6576334537cccbdc55014d23bc51218d26e983e6c306bedb1400b05986b

    • SHA512

      6f778787f006b7ed22db70269d5ab7593c6f100ac920b2b14991dd6296f9a58eafa8d9b91b010bd22501e14b0e7a395e89e0e3dc11919c68525784c621436a74

    • SSDEEP

      3072:EsKpbdrHYrMue8q7QPX+5xtekEdi8/dgj3Siz+3z4Icu6hlCE:7KpbdrHYrMue8q7QPX+5xtFEdi8/dgjN

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks