General

  • Target

    input_07.14.2020.doc

  • Size

    114KB

  • Sample

    200715-qctllfh2w6

  • MD5

    56781aaf302e5efb3b655384215daabb

  • SHA1

    3917c7f5b526eca00087f051b452c7dda60550fa

  • SHA256

    bdda92c5990ded4fd7ef2c4acfa840c0c94d2d56979b99aa4c6284f33cd9d87c

  • SHA512

    ba3b1d703e314ff11e496a268f71b08348b179f35c274847136375afb04df2fc97d9ac2591b41b8919f999228d41dc78781bb411005d780f28adaf931f94743f

Score
10/10

Malware Config

Targets

    • Target

      input_07.14.2020.doc

    • Size

      114KB

    • MD5

      56781aaf302e5efb3b655384215daabb

    • SHA1

      3917c7f5b526eca00087f051b452c7dda60550fa

    • SHA256

      bdda92c5990ded4fd7ef2c4acfa840c0c94d2d56979b99aa4c6284f33cd9d87c

    • SHA512

      ba3b1d703e314ff11e496a268f71b08348b179f35c274847136375afb04df2fc97d9ac2591b41b8919f999228d41dc78781bb411005d780f28adaf931f94743f

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks