Overview

overview

10

Static

static

ordinare-07.20.doc

windows7_x64

10

ordinare-07.20.doc

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ordinare-07.20.doc

  • Size

    147KB

  • Sample

    200711-n57c5bdpgn

  • MD5

    a595b61b7d61dd0516ebc6cbcf66f2cd

  • SHA1

    32b87fd35f9583e7adc1f2488338ead9be041868

  • SHA256

    bc871af417ff9adfdd9df5d1b9a34f0a989e4ae058e7009780d4c297ce3de5a0

  • SHA512

    a03c68525ecccf1aaef71815b198042a267caa8cf2d88edf334090b1a39958da71c8f27bf24b0d8086f3d3d39187b4a097476167ef1222258ee3c9b322b0ab29

Score
10/10

Malware Config

Targets

    • Target

      ordinare-07.20.doc

    • Size

      147KB

    • MD5

      a595b61b7d61dd0516ebc6cbcf66f2cd

    • SHA1

      32b87fd35f9583e7adc1f2488338ead9be041868

    • SHA256

      bc871af417ff9adfdd9df5d1b9a34f0a989e4ae058e7009780d4c297ce3de5a0

    • SHA512

      a03c68525ecccf1aaef71815b198042a267caa8cf2d88edf334090b1a39958da71c8f27bf24b0d8086f3d3d39187b4a097476167ef1222258ee3c9b322b0ab29

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks