General

  • Target

    92b4b734be815421f0ea5631f80e5388147e6cf2daabf9bfeff61c8e16a78dd0.xls

  • Size

    91KB

  • Sample

    241121-nexs2awmck

  • MD5

    c38157ab17f97bc72d9bb4ad15c98e7b

  • SHA1

    235ce1d4e251d39ca43610594256a6813dfbd6f0

  • SHA256

    92b4b734be815421f0ea5631f80e5388147e6cf2daabf9bfeff61c8e16a78dd0

  • SHA512

    5bd296da55775c977d658867132eaa939c4c508cf032ff8854f61676bc0c476ce159daf9364a28eccfb175d5c2b81fe0593f09d9e8e49f1df94a0cd149d738e8

  • SSDEEP

    1536:vKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgHbCXuZH4gb4CEn9J4ZnX5:vKpb8rGYrMPe3q7Q0XV5xtezEsi8/dg9

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://datie-tw.com/img/O8G0RDZj7MYCuJyPoP/

xlm40.dropper

http://sbm.xinmoshiwang.com/upload/VaOfWEb3pW76UO/

xlm40.dropper

https://copunupo.ac.zm/cgi-bin/WFFcGx/

xlm40.dropper

http://ly.yjlianyi.top/wp-admin/4cChao/

Targets

    • Target

      92b4b734be815421f0ea5631f80e5388147e6cf2daabf9bfeff61c8e16a78dd0.xls

    • Size

      91KB

    • MD5

      c38157ab17f97bc72d9bb4ad15c98e7b

    • SHA1

      235ce1d4e251d39ca43610594256a6813dfbd6f0

    • SHA256

      92b4b734be815421f0ea5631f80e5388147e6cf2daabf9bfeff61c8e16a78dd0

    • SHA512

      5bd296da55775c977d658867132eaa939c4c508cf032ff8854f61676bc0c476ce159daf9364a28eccfb175d5c2b81fe0593f09d9e8e49f1df94a0cd149d738e8

    • SSDEEP

      1536:vKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgHbCXuZH4gb4CEn9J4ZnX5:vKpb8rGYrMPe3q7Q0XV5xtezEsi8/dg9

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v15

Tasks