General

  • Target

    29dca541012fbc9bfb87f0ecca2d449dd4e87688acee6d491a18fd2c94cb55df

  • Size

    50KB

  • Sample

    241120-zks8kssraw

  • MD5

    ef57c2af40933debcc72ac951bfc1f02

  • SHA1

    75c127c8b468044ea9c63e3e2ef743350b9f6638

  • SHA256

    29dca541012fbc9bfb87f0ecca2d449dd4e87688acee6d491a18fd2c94cb55df

  • SHA512

    180e76cc2442ea2d2133728518a153e84475c60320add1a5328c339a30c609beee57e4e777c7d388a28e1c046ec5c763b6868f50b8e1e796d77f9660835e1d7a

  • SSDEEP

    1536:8RKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+E43SaU3hz/:KKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMX

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://bvirtual.com/affinita/ryXUZdAHcNNEG/

xlm40.dropper

https://bulldogironworksllc.com/temp/32930RoofbdmQ0r/

xlm40.dropper

https://www.almoeqatar.com/cgi-bin/qoOYPhlkRGnBClmNu5I/

xlm40.dropper

https://bosny.com/aspnet_client/UZlstV/

xlm40.dropper

http://mulmatdol.com/adm/Semrx6pQ/

xlm40.dropper

http://escgayrimenkul.com/cgi-bin/RuqpDmm/

Targets

    • Target

      29dca541012fbc9bfb87f0ecca2d449dd4e87688acee6d491a18fd2c94cb55df

    • Size

      50KB

    • MD5

      ef57c2af40933debcc72ac951bfc1f02

    • SHA1

      75c127c8b468044ea9c63e3e2ef743350b9f6638

    • SHA256

      29dca541012fbc9bfb87f0ecca2d449dd4e87688acee6d491a18fd2c94cb55df

    • SHA512

      180e76cc2442ea2d2133728518a153e84475c60320add1a5328c339a30c609beee57e4e777c7d388a28e1c046ec5c763b6868f50b8e1e796d77f9660835e1d7a

    • SSDEEP

      1536:8RKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+E43SaU3hz/:KKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMX

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks