Overview

overview

10

Static

static

contratto ...20.doc

windows7_x64

10

contratto ...20.doc

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    contratto di propriet.07.20.doc

  • Size

    147KB

  • Sample

    200711-1df1t5nykn

  • MD5

    2cf9a57324fd4fe06e23a155dea5a2db

  • SHA1

    47acf7215247e7c2e9f75e4f30918d0758bee906

  • SHA256

    1d298c323e5103aa4872d5b31f84db2e91dd13c6d3378813d222cdcf98bfb05a

  • SHA512

    4217c135854131f7cfe6974fa62559dae2c75b76e3423ec118628abe51248b3e267a4852cdeee7790e68fc82871e00efc1b471db3fb734cdf1e59f1dc9d1cb1c

Score
10/10

Malware Config

Targets

    • Target

      contratto di propriet.07.20.doc

    • Size

      147KB

    • MD5

      2cf9a57324fd4fe06e23a155dea5a2db

    • SHA1

      47acf7215247e7c2e9f75e4f30918d0758bee906

    • SHA256

      1d298c323e5103aa4872d5b31f84db2e91dd13c6d3378813d222cdcf98bfb05a

    • SHA512

      4217c135854131f7cfe6974fa62559dae2c75b76e3423ec118628abe51248b3e267a4852cdeee7790e68fc82871e00efc1b471db3fb734cdf1e59f1dc9d1cb1c

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks