General

  • Target

    a7be01bf50c16dab698f3c2ff28a73689bbb9cac537e2ff395c770f48caa6cdd

  • Size

    36KB

  • Sample

    241120-v8x48azdng

  • MD5

    c3c5713e4ca446a1323143d2b61b6ea6

  • SHA1

    63f176fcb766d18130e98e63423b0592a1712b92

  • SHA256

    a7be01bf50c16dab698f3c2ff28a73689bbb9cac537e2ff395c770f48caa6cdd

  • SHA512

    efce321e412143b66c5ca76d07850627aff9ca2755ecb5843b46d821504397e806ee703418c2ea813f04194e5f1eaffc370ca7efbc120f4d356fcc33e2444c85

  • SSDEEP

    768:f1kk3hbdlylKsgqopeJBWhZFGkE+cL2NdAJjj6ehEnmEzk:f1kk3hbdlylKsgqopeJBWhZFGkE+cL2V

Score
10/10

Malware Config

Extracted

Language
hta
Source
URLs
hta.dropper

http://91.240.118.168/oo/aa/se.html

Targets

    • Target

      a7be01bf50c16dab698f3c2ff28a73689bbb9cac537e2ff395c770f48caa6cdd

    • Size

      36KB

    • MD5

      c3c5713e4ca446a1323143d2b61b6ea6

    • SHA1

      63f176fcb766d18130e98e63423b0592a1712b92

    • SHA256

      a7be01bf50c16dab698f3c2ff28a73689bbb9cac537e2ff395c770f48caa6cdd

    • SHA512

      efce321e412143b66c5ca76d07850627aff9ca2755ecb5843b46d821504397e806ee703418c2ea813f04194e5f1eaffc370ca7efbc120f4d356fcc33e2444c85

    • SSDEEP

      768:f1kk3hbdlylKsgqopeJBWhZFGkE+cL2NdAJjj6ehEnmEzk:f1kk3hbdlylKsgqopeJBWhZFGkE+cL2V

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks