General

  • Target

    567d2af6f58e1d7f46c706331f394ffab9b70f170f65d191e68302e422060142

  • Size

    46KB

  • Sample

    241221-sfrevs1ph1

  • MD5

    dfc61e6554f8c233d74c305ea0b9f63c

  • SHA1

    8c790aff2316eb62d067e5a13e7f51a52a7b404c

  • SHA256

    a38189a8f6add248663c5d763827ee2d78149e137d48881368a16a57235928ae

  • SHA512

    fee0e8cac1f8faecc30b7a6c7b1fc70142224772b7bb099eda1c47a34ed6ae8a6d2f91f2b26b839491f064d03216641988fc5af74371401180cd61a71ac526ed

  • SSDEEP

    768:kq51mHq5PnzHx/8lQI81AqYx6dYTe2z2zP2weOBDhfSJv5sQSv3333333333SGFC:k81t7hmQNTYxSGe2zYblSJ2xNuKvv9m

Score
10/10

Malware Config

Targets

    • Target

      567d2af6f58e1d7f46c706331f394ffab9b70f170f65d191e68302e422060142

    • Size

      201KB

    • MD5

      9517b084a91808b4369f8bae601ee670

    • SHA1

      19f948ca66a3ebd38f4df5bf3929a65991738f3b

    • SHA256

      567d2af6f58e1d7f46c706331f394ffab9b70f170f65d191e68302e422060142

    • SHA512

      b1bc1f518777e48e7c8e2474751e65ed16b478111dec446b95a5a39d40b6e1c84bc4db20b75827a51877184a0a5387100dfc504b9c24e4df432496c24ff1ed2d

    • SSDEEP

      1536:nw6QXiA7OtBPoksm+t00qP6ddZR9mN1ItfwvViA7OtBPoksm+t00qPTddZR9mN14:nJ937yp9Y7yf7yM979/

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v15

Tasks