Overview

overview

10

Static

static

order,07.14.2020.doc

windows7_x64

10

order,07.14.2020.doc

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    order,07.14.2020.doc

  • Size

    114KB

  • Sample

    200715-kqjtrc41t2

  • MD5

    bd8f7bfdceb8a27a8e9e27486be8156f

  • SHA1

    2d610fc37f73e37d99a2f363759abdb616006329

  • SHA256

    db86431d984efcabaa6645e31eb1fe9bc8ba3b5cf5b80f4eff9306c792301473

  • SHA512

    b25f16220cf8a24d721a15e9deb6bfd8bd23077225e4c86c3b4e2fb074ab0f4dd2933916a9b4d5ac94fa37909840ae8dbd1675708416073dc797973602ef6daf

Score
10/10
discovery

Malware Config

Targets

    • Target

      order,07.14.2020.doc

    • Size

      114KB

    • MD5

      bd8f7bfdceb8a27a8e9e27486be8156f

    • SHA1

      2d610fc37f73e37d99a2f363759abdb616006329

    • SHA256

      db86431d984efcabaa6645e31eb1fe9bc8ba3b5cf5b80f4eff9306c792301473

    • SHA512

      b25f16220cf8a24d721a15e9deb6bfd8bd23077225e4c86c3b4e2fb074ab0f4dd2933916a9b4d5ac94fa37909840ae8dbd1675708416073dc797973602ef6daf

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks