General

  • Target

    089ca3e16a0114eacbea4da609eaf25d3c08f5e9c2979f3865321be5766f2302

  • Size

    70KB

  • Sample

    241120-zk7e7sxngp

  • MD5

    822a1f4523587830bd178e6413ed86f4

  • SHA1

    49dca9061cc1d7094930f7bba79f400d2f80274a

  • SHA256

    089ca3e16a0114eacbea4da609eaf25d3c08f5e9c2979f3865321be5766f2302

  • SHA512

    9cc38de5ac1809613fc730e9d571c729945b56c2a7c55d4a3b4c95b0cc03406a777eeeefe631293f575db55e84a9226f285c2c8b5ab7709b470820c7a4d358e8

  • SSDEEP

    1536:5+Kpb8rGYrMPe3q7Q0XV5xtezEsi8/dgAYW/ESKQHS1yXJFadK01B:kKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgP

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://farschid.de/verkaufsberater_service/OZRw36a2y1CH2clUzY/

xlm40.dropper

http://77homolog.com.br/dev-jealves/GP55wbYNXnp6/

xlm40.dropper

http://geowf.ge/templates/pJRea3Iu3wG/

xlm40.dropper

http://h63402x4.beget.tech/bin/wl0ENiE3BhELXV6V/

xlm40.dropper

http://ecoarch.com.tw/cgi-bin/E/

xlm40.dropper

https://galaxy-catering.com.vn/galxy/Fg1vvhlYJ/

Targets

    • Target

      089ca3e16a0114eacbea4da609eaf25d3c08f5e9c2979f3865321be5766f2302

    • Size

      70KB

    • MD5

      822a1f4523587830bd178e6413ed86f4

    • SHA1

      49dca9061cc1d7094930f7bba79f400d2f80274a

    • SHA256

      089ca3e16a0114eacbea4da609eaf25d3c08f5e9c2979f3865321be5766f2302

    • SHA512

      9cc38de5ac1809613fc730e9d571c729945b56c2a7c55d4a3b4c95b0cc03406a777eeeefe631293f575db55e84a9226f285c2c8b5ab7709b470820c7a4d358e8

    • SSDEEP

      1536:5+Kpb8rGYrMPe3q7Q0XV5xtezEsi8/dgAYW/ESKQHS1yXJFadK01B:kKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgP

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks