General

  • Target

    f76566c6f828aa486581ef277b67a418e2162be7521e70efeb5e2a5888619bf4

  • Size

    70KB

  • Sample

    241120-wx6gws1fqm

  • MD5

    101f43ee3c84076c9fe0997b27394049

  • SHA1

    b7d7f4f77fb4da739fac88ed67b01e2260bf4eae

  • SHA256

    f76566c6f828aa486581ef277b67a418e2162be7521e70efeb5e2a5888619bf4

  • SHA512

    e11a50ad9573f61c446e6bfdcf826f4d286a8a7f14a81d59ba18d9edd16aad194963a5559aa9362668046ac359c58cf2af9f5dde508d395c04431d3f62cbb804

  • SSDEEP

    1536:OhKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+KJ+hDcnTLiQrRTZws8EI:uKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMG

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://sacvasanth.com/public/lyP2lh1hlJr/

xlm40.dropper

https://webguruindia.com/theme/wTbEyLVvMNB3j/

xlm40.dropper

http://stockmorehouse.com/Casa_Grande/AS4VPkTsOqWDGGO/

Targets

    • Target

      f76566c6f828aa486581ef277b67a418e2162be7521e70efeb5e2a5888619bf4

    • Size

      70KB

    • MD5

      101f43ee3c84076c9fe0997b27394049

    • SHA1

      b7d7f4f77fb4da739fac88ed67b01e2260bf4eae

    • SHA256

      f76566c6f828aa486581ef277b67a418e2162be7521e70efeb5e2a5888619bf4

    • SHA512

      e11a50ad9573f61c446e6bfdcf826f4d286a8a7f14a81d59ba18d9edd16aad194963a5559aa9362668046ac359c58cf2af9f5dde508d395c04431d3f62cbb804

    • SSDEEP

      1536:OhKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+KJ+hDcnTLiQrRTZws8EI:uKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMG

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks