Overview

overview

8

Static

static

8

DHL_Fattur...1.xlsm

windows7_x64

DHL_Fattur...1.xlsm

windows10_x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    DHL_Fattura_cash_389127_2_9011.xlsm.zip
  • Size 29KB
  • Sample200527-zvpcatkfba
  • SHA256 aa89f94ca4ba7a646e96bbb3065376f156edb313b2547863002126591187cd74
  • MD5 SHA1 SHA512
Score
8/10
macropersistence

Malware Config

Targets

    • Target
      DHL_Fattura_cash_389127_2_9011.xlsm
    • Size 33KB
    • SHA256 1d331bbcf7e801e2fc758dec052fb6e048eff989b4f062e4dd6844f98efdc769
    • MD5 SHA1 SHA512
    Score
    6/10
    persistence

    • Modifies Winlogon

      persistence

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks