General

  • Target

    58d2ea56a85fad81a1b5543e20e7826da61eb3d072f377c11680bd0dd1c66ceb

  • Size

    44KB

  • Sample

    241221-savv4a1pcs

  • MD5

    100b75c2f44f7be470ba755749dab18d

  • SHA1

    4ff91d671a456a572bfaa30902d9b31d46dbc966

  • SHA256

    d92105ba5cbf0e90067b00a7e6f3d36eb7256a3f51f470537e0bb4ed580ff95d

  • SHA512

    e48bbf5d5ff3c5e4e10571a1a24b6f0865a8df87053ec73c2a00fd1cdbc8f5eadb086bec2477407a315cecee20fbb446db2a59f3a5ee11848710414a505884b7

  • SSDEEP

    768:7OvwHSV+ukqsFlXyJnNvK+MaKXNq9ARgm8VIoSI+SeE1q83kZcVMiEGhaJB13E/s:yyGkZX+MapVn+EJwiVFhaO/s

Score
10/10

Malware Config

Targets

    • Target

      58d2ea56a85fad81a1b5543e20e7826da61eb3d072f377c11680bd0dd1c66ceb

    • Size

      190KB

    • MD5

      5449ab81b9c38bd9e818e49d3d1ba9da

    • SHA1

      55c5c94e4f854f0b72135a77a22555c610346327

    • SHA256

      58d2ea56a85fad81a1b5543e20e7826da61eb3d072f377c11680bd0dd1c66ceb

    • SHA512

      5cd65746307ac1a75f967a6dd20fb44a4d0c38a0b00efea07447a2f1ca80e4cc9dff66aebc3d581081cf797101920e45b92a9f260736c80506b386144a4a5da4

    • SSDEEP

      1536:nwQIAIb7UK/O1lTykbJlvdFDSPYfaUIb7UK/O1laykbJlvdFDSPYfaHykbJlvdF1:nd7JRfSJRuJR0qV

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks