Overview

overview

8

Static

static

8

2020-07-10...in.xls

windows7_x64

6

2020-07-10...in.xls

windows10_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2020-07-10-XLS-file-with-macro-for-Trickbot-gtag-chil65.bin

  • Size

    295KB

  • Sample

    200711-2jysrd9ffe

  • MD5

    6a9a05395891d10f1ba57664a8a6aa6d

  • SHA1

    b786f713f2cb9ac45208a83b61542bb29ff754e8

  • SHA256

    ec36d3a5666741a9a9a44f9f05a212df0f530c4cdd47f8405701e2d85933be0e

  • SHA512

    15f4537559981d842af268fe4764ecd3a45f623d6e94d934ff5ad8b46069948add6249742c14eda152357706abfddc41cc1599bdaec8263064a68206ca0a9329

Score
8/10
macro

Malware Config

Targets

    • Target

      2020-07-10-XLS-file-with-macro-for-Trickbot-gtag-chil65.bin

    • Size

      295KB

    • MD5

      6a9a05395891d10f1ba57664a8a6aa6d

    • SHA1

      b786f713f2cb9ac45208a83b61542bb29ff754e8

    • SHA256

      ec36d3a5666741a9a9a44f9f05a212df0f530c4cdd47f8405701e2d85933be0e

    • SHA512

      15f4537559981d842af268fe4764ecd3a45f623d6e94d934ff5ad8b46069948add6249742c14eda152357706abfddc41cc1599bdaec8263064a68206ca0a9329

    Score
    6/10

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks