General

  • Target

    45aac4eeb99af8df78a39835a6d1845f463c7e7f43118f155f90488955129476

  • Size

    70KB

  • Sample

    241120-z89kgayjhr

  • MD5

    77221120c6ff2154c101f25598fdd728

  • SHA1

    153e854886d87037cb5971c5dc4821c4cf405daa

  • SHA256

    45aac4eeb99af8df78a39835a6d1845f463c7e7f43118f155f90488955129476

  • SHA512

    8ea814f497f4d834f51b394e073d752f801b5d942d43a4041875e6a0b762d543ea4a6c1e9eb8f1ac78c0d9c0a1c0ac38e1f77924068ec06754b8f392badeccdc

  • SSDEEP

    1536:OhKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+/+hDcnTLiQrRTZws8EbK:uKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM1

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://prprofile.com/wp-admin/CIqrvgYsvBiBlIM/

xlm40.dropper

https://retardantedefuegoperu.com/slider/rFhAa78/

xlm40.dropper

http://survei.absensi.net/cc-content/YCcjkOA3ijYNu46Y/

Targets

    • Target

      45aac4eeb99af8df78a39835a6d1845f463c7e7f43118f155f90488955129476

    • Size

      70KB

    • MD5

      77221120c6ff2154c101f25598fdd728

    • SHA1

      153e854886d87037cb5971c5dc4821c4cf405daa

    • SHA256

      45aac4eeb99af8df78a39835a6d1845f463c7e7f43118f155f90488955129476

    • SHA512

      8ea814f497f4d834f51b394e073d752f801b5d942d43a4041875e6a0b762d543ea4a6c1e9eb8f1ac78c0d9c0a1c0ac38e1f77924068ec06754b8f392badeccdc

    • SSDEEP

      1536:OhKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+/+hDcnTLiQrRTZws8EbK:uKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM1

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks