Overview

overview

8

Static

static

PO# AO-20051.xlsx

windows7_x64

8

PO# AO-20051.xlsx

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PO# AO-20051.xlsx

  • Size

    74KB

  • Sample

    200710-hs2t2daajn

  • MD5

    8d3f38c8eddc5e47becce659102ceb3b

  • SHA1

    439fda53355724dba2cd713e49334a6a928f1026

  • SHA256

    2456c984a012053956c889e4bcbc484916cb4933484306f04b7e924d911b0fcb

  • SHA512

    62caf3d2b53fc278b1b71771780398b68d8d4cd37434d3f848ed50b9146e1d9cbf20ada3b10e37921e299f621a43f405adeffb5d07780c592798b4dae70ae057

Score
8/10

Malware Config

Targets

    • Target

      PO# AO-20051.xlsx

    • Size

      74KB

    • MD5

      8d3f38c8eddc5e47becce659102ceb3b

    • SHA1

      439fda53355724dba2cd713e49334a6a928f1026

    • SHA256

      2456c984a012053956c889e4bcbc484916cb4933484306f04b7e924d911b0fcb

    • SHA512

      62caf3d2b53fc278b1b71771780398b68d8d4cd37434d3f848ed50b9146e1d9cbf20ada3b10e37921e299f621a43f405adeffb5d07780c592798b4dae70ae057

    Score
    8/10

    • Blacklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Exploitation for Client Execution

1
T1203

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks