General

  • Target

    d46d3d98c537968c47418a488aad84daabaa71e2982636588a815a11d4e637ba

  • Size

    142KB

  • Sample

    241120-xwkdps1qcv

  • MD5

    1f222eac86a89e9dbacab1c6879ceec8

  • SHA1

    3cbcf46bae6ee26cca30954e84a2a5f03d23df34

  • SHA256

    d46d3d98c537968c47418a488aad84daabaa71e2982636588a815a11d4e637ba

  • SHA512

    f659c62b070f6be8bfcf48b3c18e00574114eebc89125fcc44d704109ea87726583249df64e1186a0d83efe4fb75bb7ed4a5c94fb488d62679b2369adafc6b69

  • SSDEEP

    3072:kfKpbdrHYrMue8q7QPX+5xtekEdi8/dgA/c/mrWmngyYXnMJelsSKThsdskl4Wjy:8KpbdrHYrMue8q7QPX+5xtFEdi8/dgAL

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://www.greenvalleyschool.com/rand_images/1R9sqGnZOFKmQi/

xlm40.dropper

https://www.travellers-autobarnrv.com/new/m9E2A5lQQ2noHkMP/

xlm40.dropper

https://www.campusconindigital.org/moodle311/oWZgMvUttcPDFNn/

xlm40.dropper

https://www.destinocuenca.com/libraries/oHuqdP31/

xlm40.dropper

https://www.defsalabs.com/videos/i1Dde2yzrONF5Nmhs28j/

Targets

    • Target

      d46d3d98c537968c47418a488aad84daabaa71e2982636588a815a11d4e637ba

    • Size

      142KB

    • MD5

      1f222eac86a89e9dbacab1c6879ceec8

    • SHA1

      3cbcf46bae6ee26cca30954e84a2a5f03d23df34

    • SHA256

      d46d3d98c537968c47418a488aad84daabaa71e2982636588a815a11d4e637ba

    • SHA512

      f659c62b070f6be8bfcf48b3c18e00574114eebc89125fcc44d704109ea87726583249df64e1186a0d83efe4fb75bb7ed4a5c94fb488d62679b2369adafc6b69

    • SSDEEP

      3072:kfKpbdrHYrMue8q7QPX+5xtekEdi8/dgA/c/mrWmngyYXnMJelsSKThsdskl4Wjy:8KpbdrHYrMue8q7QPX+5xtFEdi8/dgAL

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks