Overview

overview

10

Static

static

docs-07.20.doc

windows7_x64

10

docs-07.20.doc

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    docs-07.20.doc

  • Size

    147KB

  • Sample

    200711-k94pv8q4re

  • MD5

    7dd79ba56b7ec464e9b515d900f3f569

  • SHA1

    6c2bf5092ce30405ee4b7a349d9fe533045c6b4a

  • SHA256

    ca822b28a868bb52c0e59bf09093cf38dedb0a09c82718d3979980f13c02d1b9

  • SHA512

    b0974074f16bd77a59d4d36faa671998eb245d43e4ac966a4eeea53840b03385cdba5ec5780829fcd85d4360743c4429e1d55d2aeae3cbb52786ea8ff9afe494

Score
10/10

Malware Config

Targets

    • Target

      docs-07.20.doc

    • Size

      147KB

    • MD5

      7dd79ba56b7ec464e9b515d900f3f569

    • SHA1

      6c2bf5092ce30405ee4b7a349d9fe533045c6b4a

    • SHA256

      ca822b28a868bb52c0e59bf09093cf38dedb0a09c82718d3979980f13c02d1b9

    • SHA512

      b0974074f16bd77a59d4d36faa671998eb245d43e4ac966a4eeea53840b03385cdba5ec5780829fcd85d4360743c4429e1d55d2aeae3cbb52786ea8ff9afe494

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks