General

  • Target

    842bb1e2c5a86de9cb98aa3a1c9df2795af436885f2ab1851fe88802d1c57346

  • Size

    126KB

  • Sample

    241120-w3hysazhnb

  • MD5

    56790f3c7a9e8b159eb7342765451fef

  • SHA1

    a8c628bab71d9c8549ccf08d60bf0d038c6abe72

  • SHA256

    842bb1e2c5a86de9cb98aa3a1c9df2795af436885f2ab1851fe88802d1c57346

  • SHA512

    658e88e1a49e523b67fc49ee198187b0a2371e13131df420142eea318e1d4ad1074e7ad52cf1d34138769d832f7d269a5a8c88b6ebb78be768449682d108d677

  • SSDEEP

    3072:EsKpbdrHYrMue8q7QPX+5xtekEdi8/dgj3Siz+3z4Icu6hlC0:7KpbdrHYrMue8q7QPX+5xtFEdi8/dgjd

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://www.forensisbilisim.com/ankara/bplsmKfaKAwAyavNj/

xlm40.dropper

https://www.faitmaison.uk/wp-admin/BZMoK/

xlm40.dropper

http://www.fahriefe.com.tr/yargitaykararlari/aVg/

xlm40.dropper

http://www.parapetyrs.cz/wp-content/uploads/UTnG7GKKkZf/

xlm40.dropper

https://www.whow.fr/wp-includes/aZo78JmHBoEmW6fVQ/

xlm40.dropper

http://www.drcno.sk/_sub/FcEgwPugDI7wr2/

Targets

    • Target

      842bb1e2c5a86de9cb98aa3a1c9df2795af436885f2ab1851fe88802d1c57346

    • Size

      126KB

    • MD5

      56790f3c7a9e8b159eb7342765451fef

    • SHA1

      a8c628bab71d9c8549ccf08d60bf0d038c6abe72

    • SHA256

      842bb1e2c5a86de9cb98aa3a1c9df2795af436885f2ab1851fe88802d1c57346

    • SHA512

      658e88e1a49e523b67fc49ee198187b0a2371e13131df420142eea318e1d4ad1074e7ad52cf1d34138769d832f7d269a5a8c88b6ebb78be768449682d108d677

    • SSDEEP

      3072:EsKpbdrHYrMue8q7QPX+5xtekEdi8/dgj3Siz+3z4Icu6hlC0:7KpbdrHYrMue8q7QPX+5xtFEdi8/dgjd

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks