Overview

overview

10

Static

static

file_07.20.doc

windows7_x64

10

file_07.20.doc

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file_07.20.doc

  • Size

    147KB

  • Sample

    200711-rb8g5dw18e

  • MD5

    2908546ca31c2afbb20b6fbdde284b25

  • SHA1

    fb5a6054c9f66ad4c5d16e20f8aee2cca0ef98d5

  • SHA256

    a76aa17b3c66f1bc861ff329710e0b94c0a9fdefa9e3c1b3e6d1d8410d85b679

  • SHA512

    608a411379a00acdd3909faa68aa6c2c47739698e15bc811621dae41b09e26b42061d5ca8752958e4d03f59bd0359b78a1edb672675fa98ba45814d7fb972c7b

Score
10/10

Malware Config

Targets

    • Target

      file_07.20.doc

    • Size

      147KB

    • MD5

      2908546ca31c2afbb20b6fbdde284b25

    • SHA1

      fb5a6054c9f66ad4c5d16e20f8aee2cca0ef98d5

    • SHA256

      a76aa17b3c66f1bc861ff329710e0b94c0a9fdefa9e3c1b3e6d1d8410d85b679

    • SHA512

      608a411379a00acdd3909faa68aa6c2c47739698e15bc811621dae41b09e26b42061d5ca8752958e4d03f59bd0359b78a1edb672675fa98ba45814d7fb972c7b

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks