General

  • Target

    e942805b5fcab3b944214ead2299c5d5011e96cfc16542645cb170108dbce255

  • Size

    106KB

  • Sample

    241122-cemghssjat

  • MD5

    2fdad488275d677600070e70ae8a50a1

  • SHA1

    135f93fb24bba12be67e5bc7dd6ee168fc28c74e

  • SHA256

    e942805b5fcab3b944214ead2299c5d5011e96cfc16542645cb170108dbce255

  • SHA512

    a0dc83122167271e36ce7b972509c38a3515463eac48ccdc84c13a17003fe93aabb95fa6b8b8469ec6aa9ecba5a12dbb392ec9631f01ca01bd175693748ddd32

  • SSDEEP

    3072:8sKpbdrHYrMue8q7QPX+5xtekEdi8/dg3tgSmsCpH/KZuAZGsMG:jKpbdrHYrMue8q7QPX+5xtFEdi8/dgdP

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://dougveeder.com/cgi-bin/xJ91ZttGRioQ7IUL/

xlm40.dropper

https://e-fistik.com/ajax/PnA23/

xlm40.dropper

http://dsinformaticos.com/_private/f36Yl/

xlm40.dropper

http://dstny.net/cgi-bin/POqJKcxiIzRb/

xlm40.dropper

http://fakecity.net/cache/XtIzhyLEoLI7/

xlm40.dropper

http://fayeschmidt.com/cgi-bin/Q8pj6/

Targets

    • Target

      e942805b5fcab3b944214ead2299c5d5011e96cfc16542645cb170108dbce255

    • Size

      106KB

    • MD5

      2fdad488275d677600070e70ae8a50a1

    • SHA1

      135f93fb24bba12be67e5bc7dd6ee168fc28c74e

    • SHA256

      e942805b5fcab3b944214ead2299c5d5011e96cfc16542645cb170108dbce255

    • SHA512

      a0dc83122167271e36ce7b972509c38a3515463eac48ccdc84c13a17003fe93aabb95fa6b8b8469ec6aa9ecba5a12dbb392ec9631f01ca01bd175693748ddd32

    • SSDEEP

      3072:8sKpbdrHYrMue8q7QPX+5xtekEdi8/dg3tgSmsCpH/KZuAZGsMG:jKpbdrHYrMue8q7QPX+5xtFEdi8/dgdP

    Score
    10/10

MITRE ATT&CK Enterprise v15

Tasks