General

  • Target

    ea88759df2b65f7904b998d5bbfae17dc3bca11b05c889e7043770298c7b645c

  • Size

    31KB

  • Sample

    241130-fw72bstqgv

  • MD5

    ab30aae35c2c14af366a5647ca1e53e1

  • SHA1

    8d30e8b000e09763e18c3b330a91cccd5e5770da

  • SHA256

    ea88759df2b65f7904b998d5bbfae17dc3bca11b05c889e7043770298c7b645c

  • SHA512

    b01ea5f06121288b966ecd5e84d146ab3dddd1a23a2b3ea135607a69b2c9c309a6d8833664ab231247415adf1b7b9edb91337e12f9a508b52914c48ce323cb94

  • SSDEEP

    768:sYzkFZqKKeZOyYMY1J4UWPknF0KaHw2PQUbj3m1hv9:YFIeZRYMIJSPkF0KaHFQ8shF

Score
10/10

Malware Config

Extracted

Language
hta
Source
URLs
hta.dropper

http://95.211.27.154/install.php?id=02944

Extracted

Language
hta
Source
URLs
hta.dropper

http://urodinam.net/8732489273.php

Targets

    • Target

      ea88759df2b65f7904b998d5bbfae17dc3bca11b05c889e7043770298c7b645c

    • Size

      31KB

    • MD5

      ab30aae35c2c14af366a5647ca1e53e1

    • SHA1

      8d30e8b000e09763e18c3b330a91cccd5e5770da

    • SHA256

      ea88759df2b65f7904b998d5bbfae17dc3bca11b05c889e7043770298c7b645c

    • SHA512

      b01ea5f06121288b966ecd5e84d146ab3dddd1a23a2b3ea135607a69b2c9c309a6d8833664ab231247415adf1b7b9edb91337e12f9a508b52914c48ce323cb94

    • SSDEEP

      768:sYzkFZqKKeZOyYMY1J4UWPknF0KaHw2PQUbj3m1hv9:YFIeZRYMIJSPkF0KaHFQ8shF

    Score
    10/10
    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks