Overview

overview

10

Static

static

documento ...20.doc

windows7_x64

10

documento ...20.doc

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    documento ufficiale,07.20.doc

  • Size

    147KB

  • Sample

    200711-7fhmtpayex

  • MD5

    29d55324310c106a92fd0e1b422b39de

  • SHA1

    d87feba63dab58c4754c205b1c3cda9169d9a274

  • SHA256

    604d7046297dcbf29e1e3a53ecf27136c4e39b2e36fe2314559f380b564ff7b4

  • SHA512

    5b478c89aebec5d85723e9b6e84115514e0e8c60a589b7426169ca147dbc97d4357ef9283ee42d33a7fcde215350ea951f2e2d4ecc228f8d85926937c48f3ac6

Score
10/10

Malware Config

Targets

    • Target

      documento ufficiale,07.20.doc

    • Size

      147KB

    • MD5

      29d55324310c106a92fd0e1b422b39de

    • SHA1

      d87feba63dab58c4754c205b1c3cda9169d9a274

    • SHA256

      604d7046297dcbf29e1e3a53ecf27136c4e39b2e36fe2314559f380b564ff7b4

    • SHA512

      5b478c89aebec5d85723e9b6e84115514e0e8c60a589b7426169ca147dbc97d4357ef9283ee42d33a7fcde215350ea951f2e2d4ecc228f8d85926937c48f3ac6

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks