General

  • Target
    SecuriteInfo.com.DOC.Kryptik.Q.10203
  • Size 308KB
  • Sample200713-797m9tzbkn
  • SHA256 509675060738c04bac197d7914eb3ec90da8246910466f7597440e1fef194320
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Targets

    • Target
      SecuriteInfo.com.DOC.Kryptik.Q.10203
    • Size 308KB
    • SHA256 509675060738c04bac197d7914eb3ec90da8246910466f7597440e1fef194320
    • MD5 SHA1 SHA512
    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Enumerates connected drives

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

MITRE ATT&CK Enterprise v6

Tasks