Overview

overview

10

Static

static

535 01 0531270.xlsm

windows7_x64

10

535 01 0531270.xlsm

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    839 01 0616432.xlsm.zip
  • Size 34KB
  • Sample200715-zth2ksrkvs
  • SHA256 a749830a85b898ba52667a1f40c7b842b451fe8fbb41e82ffa6874f071894e01
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Targets

    • Target
      535 01 0531270.xlsm
    • Size 37KB
    • SHA256 ee527aa3cdae692903bfda51ad479f46484eb48e67f9c1e5ac6d3efb1ca56a7f
    • MD5 SHA1 SHA512
    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks