Overview

overview

8

Static

static

c3b92516dd...7d.xls

windows7_x64

6

c3b92516dd...7d.xls

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3b92516dd77bf745e32aa4ffc4db810f0dbb9d290989235c71489b75910917d

  • Size

    340KB

  • Sample

    200713-km2vd3ax1e

  • MD5

    1591dce6e9ac5b9cfc8246d1113a14e8

  • SHA1

    f9248ab4978f521c1052a6d54932aadeb8a56560

  • SHA256

    c3b92516dd77bf745e32aa4ffc4db810f0dbb9d290989235c71489b75910917d

  • SHA512

    5de06b8d3bee8af4d9069efe7efed0dc6cf2f43dd60535d658055f69dd3259617228477ce851e1c45834321e535c043fe633dbbaf60b69d38d0d7ee9ec866f16

Score
8/10

Malware Config

Targets

    • Target

      c3b92516dd77bf745e32aa4ffc4db810f0dbb9d290989235c71489b75910917d

    • Size

      340KB

    • MD5

      1591dce6e9ac5b9cfc8246d1113a14e8

    • SHA1

      f9248ab4978f521c1052a6d54932aadeb8a56560

    • SHA256

      c3b92516dd77bf745e32aa4ffc4db810f0dbb9d290989235c71489b75910917d

    • SHA512

      5de06b8d3bee8af4d9069efe7efed0dc6cf2f43dd60535d658055f69dd3259617228477ce851e1c45834321e535c043fe633dbbaf60b69d38d0d7ee9ec866f16

    Score
    8/10

    • Executes dropped EXE

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks