Overview

overview

8

Static

static

SHIPPING D...5.xlsx

windows7_x64

8

SHIPPING D...5.xlsx

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SHIPPING DOC BL,SI,INV#462345.xlsx

  • Size

    14KB

  • Sample

    200528-7w84a173kn

  • MD5

    75c8e9700778d9705dbd045d6b4664c8

  • SHA1

    1dc46f5b3844ef208fd9532c179e8ecbd4b5f254

  • SHA256

    237857e2e66f82b37385ca905343e6d224d06bf192d756fcd607af0ab73475c5

  • SHA512

    f795cec9a4edffb6633d646f483e3fabef38af04399056ca09149df70c98691cd630f843b01282a63070988248db0fcb74f57e403b1f92667b320c47a3780998

Score
8/10

Malware Config

Targets

    • Target

      SHIPPING DOC BL,SI,INV#462345.xlsx

    • Size

      14KB

    • MD5

      75c8e9700778d9705dbd045d6b4664c8

    • SHA1

      1dc46f5b3844ef208fd9532c179e8ecbd4b5f254

    • SHA256

      237857e2e66f82b37385ca905343e6d224d06bf192d756fcd607af0ab73475c5

    • SHA512

      f795cec9a4edffb6633d646f483e3fabef38af04399056ca09149df70c98691cd630f843b01282a63070988248db0fcb74f57e403b1f92667b320c47a3780998

    Score
    8/10

    • Blacklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Exploitation for Client Execution

1
T1203

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks