General

  • Target

    3102c50fddd6bbc1e5c8e90f91fb984327f0bdb71343c4febc1b07d62351bcfe

  • Size

    95KB

  • Sample

    241120-z343sstalg

  • MD5

    18ccf9783c4ce2ac723bfe40459e29ef

  • SHA1

    9b55316fb9e9e46bb55eca462c1d862dceb6a97f

  • SHA256

    3102c50fddd6bbc1e5c8e90f91fb984327f0bdb71343c4febc1b07d62351bcfe

  • SHA512

    055f2cc3961597a051e719473ad1592451235fa11a4179db5113eed7f11d36f8e35c2b97ca50851f2be2178f5af0bb2b8e36b37597125847933fc3de39c00f01

  • SSDEEP

    1536:UkKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgNHuS4hcTO97v7UYdEJmt:bKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgQ

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://fikti.bem.gunadarma.ac.id/SDM/YH8OJ1Zz8miBX/

xlm40.dropper

http://ebuysa.co.za/yt-assets/yZ30/

xlm40.dropper

http://3dstudioa.com.br/files/1ubPAB/

xlm40.dropper

http://boardmart.co.za/images/DvMHPbTLn/

Targets

    • Target

      3102c50fddd6bbc1e5c8e90f91fb984327f0bdb71343c4febc1b07d62351bcfe

    • Size

      95KB

    • MD5

      18ccf9783c4ce2ac723bfe40459e29ef

    • SHA1

      9b55316fb9e9e46bb55eca462c1d862dceb6a97f

    • SHA256

      3102c50fddd6bbc1e5c8e90f91fb984327f0bdb71343c4febc1b07d62351bcfe

    • SHA512

      055f2cc3961597a051e719473ad1592451235fa11a4179db5113eed7f11d36f8e35c2b97ca50851f2be2178f5af0bb2b8e36b37597125847933fc3de39c00f01

    • SSDEEP

      1536:UkKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgNHuS4hcTO97v7UYdEJmt:bKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgQ

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks