Overview

overview

10

Static

static

richiedere.07.20.doc

windows7_x64

10

richiedere.07.20.doc

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    richiedere.07.20.doc

  • Size

    134KB

  • Sample

    200711-7jaca25dns

  • MD5

    2a3becf45cb2beab4516efe3e2ab2c74

  • SHA1

    034531bbf31899b2c44a2887a64b013396cd8e0d

  • SHA256

    c4b476186a7d27189e16f2c25a20d47c84da5e08fe7994014cbbad879c53dbfd

  • SHA512

    02a843000356e760523fee53320ac93c545d39cd34e9791acbf0759e6d55ec511d4c3d299f4a6b5770b47ba737b691cc5af5b496ed05c517b047c2cf668c5546

Score
10/10

Malware Config

Targets

    • Target

      richiedere.07.20.doc

    • Size

      134KB

    • MD5

      2a3becf45cb2beab4516efe3e2ab2c74

    • SHA1

      034531bbf31899b2c44a2887a64b013396cd8e0d

    • SHA256

      c4b476186a7d27189e16f2c25a20d47c84da5e08fe7994014cbbad879c53dbfd

    • SHA512

      02a843000356e760523fee53320ac93c545d39cd34e9791acbf0759e6d55ec511d4c3d299f4a6b5770b47ba737b691cc5af5b496ed05c517b047c2cf668c5546

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks