Overview

overview

10

Static

static

8

4d7371b442...86.xls

windows7_x64

6

4d7371b442...86.xls

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    4d7371b44234a3b79049dfcd35b499ec14c03b786876694d7ee1e1a4f7567f86.xls
  • Size 274KB
  • Sample200715-yanld7nwbs
  • SHA256 4d7371b44234a3b79049dfcd35b499ec14c03b786876694d7ee1e1a4f7567f86
  • MD5 SHA1 SHA512
Score
10/10
macro

Malware Config

Targets

    • Target
      4d7371b44234a3b79049dfcd35b499ec14c03b786876694d7ee1e1a4f7567f86.xls
    • Size 274KB
    • SHA256 4d7371b44234a3b79049dfcd35b499ec14c03b786876694d7ee1e1a4f7567f86
    • MD5 SHA1 SHA512
    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Enumerates connected drives

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks