Overview

overview

10

Static

static

8

SecuriteIn...85.xls

windows7_x64

6

SecuriteIn...85.xls

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.DOC.Kryptik.Q.8385

  • Size

    313KB

  • Sample

    200713-bjymg6fqys

  • MD5

    fa97adbc7a98b0a3f47b72f9009feee9

  • SHA1

    559ab55a314bc8d346c3799b60e6ce800bf08a78

  • SHA256

    767c5dd7a76d11f71aa86776ccd2c80439276185c823bbcfd828262a26524a1f

  • SHA512

    a249774fca2093bf1018b67704b7150b790694861914c8bf94adac73a51d3109290bc7ba7d9dafc11129136fece5afe1adb3934819ae16b1cddff86e02c1eba6

Score
10/10
macro

Malware Config

Targets

    • Target

      SecuriteInfo.com.DOC.Kryptik.Q.8385

    • Size

      313KB

    • MD5

      fa97adbc7a98b0a3f47b72f9009feee9

    • SHA1

      559ab55a314bc8d346c3799b60e6ce800bf08a78

    • SHA256

      767c5dd7a76d11f71aa86776ccd2c80439276185c823bbcfd828262a26524a1f

    • SHA512

      a249774fca2093bf1018b67704b7150b790694861914c8bf94adac73a51d3109290bc7ba7d9dafc11129136fece5afe1adb3934819ae16b1cddff86e02c1eba6

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Enumerates connected drives

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks