General

  • Target

    3824c4ab9d346530fbebf378d6965159dd074787e8c6c216a57befaaeaebdb53

  • Size

    126KB

  • Sample

    241120-yskqqssamd

  • MD5

    b30875447ec73cbf8559b19638724930

  • SHA1

    6501f56a10f70dc8a79470706f3aac62597e3529

  • SHA256

    3824c4ab9d346530fbebf378d6965159dd074787e8c6c216a57befaaeaebdb53

  • SHA512

    07b09d232ad7f67c10cd5fa7d7a010a8e1e9befe94b6a5f913db1e65b9b6ec671e8cb3f40d28da117806e9663cb115fdfe9e0755cfc84e64d2ee693cbb32d8db

  • SSDEEP

    3072:EsKpbdrHYrMue8q7QPX+5xtekEdi8/dgj3Siz+3z4Icu6hlCY:7KpbdrHYrMue8q7QPX+5xtFEdi8/dgjJ

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://www.forensisbilisim.com/ankara/bplsmKfaKAwAyavNj/

xlm40.dropper

https://www.faitmaison.uk/wp-admin/BZMoK/

xlm40.dropper

http://www.fahriefe.com.tr/yargitaykararlari/aVg/

xlm40.dropper

http://www.parapetyrs.cz/wp-content/uploads/UTnG7GKKkZf/

xlm40.dropper

https://www.whow.fr/wp-includes/aZo78JmHBoEmW6fVQ/

xlm40.dropper

http://www.drcno.sk/_sub/FcEgwPugDI7wr2/

Targets

    • Target

      3824c4ab9d346530fbebf378d6965159dd074787e8c6c216a57befaaeaebdb53

    • Size

      126KB

    • MD5

      b30875447ec73cbf8559b19638724930

    • SHA1

      6501f56a10f70dc8a79470706f3aac62597e3529

    • SHA256

      3824c4ab9d346530fbebf378d6965159dd074787e8c6c216a57befaaeaebdb53

    • SHA512

      07b09d232ad7f67c10cd5fa7d7a010a8e1e9befe94b6a5f913db1e65b9b6ec671e8cb3f40d28da117806e9663cb115fdfe9e0755cfc84e64d2ee693cbb32d8db

    • SSDEEP

      3072:EsKpbdrHYrMue8q7QPX+5xtekEdi8/dgj3Siz+3z4Icu6hlCY:7KpbdrHYrMue8q7QPX+5xtFEdi8/dgjJ

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks