Overview

overview

8

Static

static

8

IRS_Sheet_5609567.xls

windows7_x64

6

IRS_Sheet_5609567.xls

windows10_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    IRS_Sheet_5609567.xls

  • Size

    78KB

  • Sample

    200708-r51v82ssls

  • MD5

    2bbc0cd25fd17a20905533745d37cafa

  • SHA1

    5310336b56430a42fb652e40a6b09fa1aa004ce8

  • SHA256

    3574b67e84e558069610e38049cc5e17d832c8bb012ba5844ebc4aff0c41bf27

  • SHA512

    6c51cf99c144cc66a4694305f16829aabc4aecb3b5e87f7352039e9c54096352f9fd3ef01110eb0e8e3b8111e2166abc364e971a6b4f0c1ee49d56598e0d09b9

Score
8/10
macro

Malware Config

Targets

    • Target

      IRS_Sheet_5609567.xls

    • Size

      78KB

    • MD5

      2bbc0cd25fd17a20905533745d37cafa

    • SHA1

      5310336b56430a42fb652e40a6b09fa1aa004ce8

    • SHA256

      3574b67e84e558069610e38049cc5e17d832c8bb012ba5844ebc4aff0c41bf27

    • SHA512

      6c51cf99c144cc66a4694305f16829aabc4aecb3b5e87f7352039e9c54096352f9fd3ef01110eb0e8e3b8111e2166abc364e971a6b4f0c1ee49d56598e0d09b9

    Score
    6/10

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks