General

  • Target

    8733cbc5d33aaa41661e735e686311158817ef9d747ad54cab7bfc6f475c114b

  • Size

    46KB

  • Sample

    241120-xd6tzs1nas

  • MD5

    a7fec9507376dd533b50e154cb931e28

  • SHA1

    a2e1a5c5510c3272bf25a7222b38bd66f5a77d55

  • SHA256

    8733cbc5d33aaa41661e735e686311158817ef9d747ad54cab7bfc6f475c114b

  • SHA512

    51e0dc8a81eb912229ba7655312c4bd7086f126f7c9eb709e81151b7e64d1f09ffaeee7fe8d8cc456c890f8fcaa33942a402a3326e1df6fa7572f7f9f2a61b96

  • SSDEEP

    768:pDMPKpb8rGYrMPe3q7Q0XV5xtezE8vpI8UM+VgTBs7QqvZQ4tsdurf:pYKpb8rGYrMPe3q7Q0XV5xtezE8vG8Uf

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://202.29.80.55/2021/z/

xlm40.dropper

http://23.239.12.243/dealspot/SvebxVmFucz/

xlm40.dropper

https://adviceme.gr/test/SSzbOkk633/

Targets

    • Target

      8733cbc5d33aaa41661e735e686311158817ef9d747ad54cab7bfc6f475c114b

    • Size

      46KB

    • MD5

      a7fec9507376dd533b50e154cb931e28

    • SHA1

      a2e1a5c5510c3272bf25a7222b38bd66f5a77d55

    • SHA256

      8733cbc5d33aaa41661e735e686311158817ef9d747ad54cab7bfc6f475c114b

    • SHA512

      51e0dc8a81eb912229ba7655312c4bd7086f126f7c9eb709e81151b7e64d1f09ffaeee7fe8d8cc456c890f8fcaa33942a402a3326e1df6fa7572f7f9f2a61b96

    • SSDEEP

      768:pDMPKpb8rGYrMPe3q7Q0XV5xtezE8vpI8UM+VgTBs7QqvZQ4tsdurf:pYKpb8rGYrMPe3q7Q0XV5xtezE8vG8Uf

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks