Overview

overview

8

Static

static

8

QO-77190441.xlsm

windows7_x64

6

QO-77190441.xlsm

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    QO-77190441.xlsm
  • Size 64KB
  • Sample200713-91kqds9c7x
  • SHA256 b17553745e016653cace2242fbf6be5d91642e9ec2424d43f97d47576b2fc046
  • MD5 SHA1 SHA512
Score
8/10
evasionmacrospywaretrojan

Malware Config

Targets

    • Target
      QO-77190441.xlsm
    • Size 64KB
    • SHA256 b17553745e016653cace2242fbf6be5d91642e9ec2424d43f97d47576b2fc046
    • MD5 SHA1 SHA512
    Score
    8/10
    evasionspywaretrojan

    • Executes dropped EXE

    • Modifies system certificate store

      evasionspywaretrojan

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks