Overview

overview

8

Static

static

payment_499285.xls

windows7_x64

6

payment_499285.xls

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    payment_499285.xls

  • Size

    520KB

  • Sample

    200714-be74zpx6j2

  • MD5

    0cbeaee243b3d87ebde4437a38da1a3e

  • SHA1

    89d03d4e777ba41ad8071ecb5123aa52c9b856eb

  • SHA256

    7c398cc722f79e55d41ae267d2ab35cb401e721f710ce7ba249a864195c33af3

  • SHA512

    050172e36bdc49689ad3b6ec0d0ec800af23148e932d0107e31f081967939e6f091bcbb70d069f2895debba8ec823a5274a6b72556712eb7971711709f175952

Score
8/10

Malware Config

Targets

    • Target

      payment_499285.xls

    • Size

      520KB

    • MD5

      0cbeaee243b3d87ebde4437a38da1a3e

    • SHA1

      89d03d4e777ba41ad8071ecb5123aa52c9b856eb

    • SHA256

      7c398cc722f79e55d41ae267d2ab35cb401e721f710ce7ba249a864195c33af3

    • SHA512

      050172e36bdc49689ad3b6ec0d0ec800af23148e932d0107e31f081967939e6f091bcbb70d069f2895debba8ec823a5274a6b72556712eb7971711709f175952

    Score
    8/10

    • Executes dropped EXE

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks