General
-
Target
6b5c32f3235f756ae76cde5fa438edbafa21b53645e8923797f3572849a32b3b
-
Size
45KB
-
Sample
241120-y6d54stblk
-
MD5
2bc1f210e79e5fad4b5395da39ba6811
-
SHA1
4653fb1f0c49d164b3c9da6848383ae4ab62396f
-
SHA256
6b5c32f3235f756ae76cde5fa438edbafa21b53645e8923797f3572849a32b3b
-
SHA512
031e545674192707a5d15fb179d7914f6cfb328800ca93ced7ca892fddfd3fb63b783093b14cdcb9163990873ba5633bb98c930051a27f87592c88527b8618e4
-
SSDEEP
768:bkPKpb8rGYrMPe3q7Q0XV5xtezEs/68/dgAPVdtWgojJcFDqCRt6vuVUeJl5:bsKpb8rGYrMPe3q7Q0XV5xtezEsi8/dh
Malware Config
Extracted
https://fpd.cl/cgi-bin/83E0xgTMc/
https://el-energiaki.gr/wp-content/plugins/really-simple-ssl/testssl/serverport443/WUV5PJA/
https://www.manchesterslt.co.uk/a-to-z-of-slt/Ntrci3Ry/
http://contactworks.nl/layouts/fFxKZabh/
http://baykusoglu.com.tr/wp-admin/Y3sRBcOfZ34wg2sO/
Targets
-
-
Target
6b5c32f3235f756ae76cde5fa438edbafa21b53645e8923797f3572849a32b3b
-
Size
45KB
-
MD5
2bc1f210e79e5fad4b5395da39ba6811
-
SHA1
4653fb1f0c49d164b3c9da6848383ae4ab62396f
-
SHA256
6b5c32f3235f756ae76cde5fa438edbafa21b53645e8923797f3572849a32b3b
-
SHA512
031e545674192707a5d15fb179d7914f6cfb328800ca93ced7ca892fddfd3fb63b783093b14cdcb9163990873ba5633bb98c930051a27f87592c88527b8618e4
-
SSDEEP
768:bkPKpb8rGYrMPe3q7Q0XV5xtezEs/68/dgAPVdtWgojJcFDqCRt6vuVUeJl5:bsKpb8rGYrMPe3q7Q0XV5xtezEsi8/dh
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-