General

  • Target

    8640c09f0c2a1a9c20b8fd9703dd0693da558d399c9c6028fd7880b73a2640a6

  • Size

    70KB

  • Sample

    241120-whdhka1dpr

  • MD5

    bf088e3fa3851823821fc51fbfa1e511

  • SHA1

    f2458e7615e2b8a26b031343cb031ad0fbdb27a0

  • SHA256

    8640c09f0c2a1a9c20b8fd9703dd0693da558d399c9c6028fd7880b73a2640a6

  • SHA512

    42f0f30416ca7cb36918f87c3436a474dc45c2ea3f5e85b6d6c4cbdc98d205707877b702ed87a439c58c247358513a4ceb149d7e25714ea0c4994f7b3a3ac256

  • SSDEEP

    1536:tOKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+1YW/ESKQHS1yXJFa5etSv:AKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM5

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://congtycamvinh.com/plugins/jG3iqpQaTL1TXYMolH/

xlm40.dropper

http://ecube.com.mx/e2oCWBnC/6wp2K4sfQmVIRy6ZvdiH/

xlm40.dropper

http://dulichdichvu.net/libraries/6vhzwoZoNDSMtSC/

xlm40.dropper

http://gnif.org/administrator/G68HwUGlKNJNU2vh5cz/

xlm40.dropper

https://edoraseguros.com.br/cgi-bin/l7ZERv5deNsfzlZUZ/

xlm40.dropper

https://sanoma.allrent.nl/cgi-bin/KXbI5OhLJ/

Targets

    • Target

      8640c09f0c2a1a9c20b8fd9703dd0693da558d399c9c6028fd7880b73a2640a6

    • Size

      70KB

    • MD5

      bf088e3fa3851823821fc51fbfa1e511

    • SHA1

      f2458e7615e2b8a26b031343cb031ad0fbdb27a0

    • SHA256

      8640c09f0c2a1a9c20b8fd9703dd0693da558d399c9c6028fd7880b73a2640a6

    • SHA512

      42f0f30416ca7cb36918f87c3436a474dc45c2ea3f5e85b6d6c4cbdc98d205707877b702ed87a439c58c247358513a4ceb149d7e25714ea0c4994f7b3a3ac256

    • SSDEEP

      1536:tOKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+1YW/ESKQHS1yXJFa5etSv:AKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM5

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks