Overview

overview

10

Static

static

8

reminder_1687164.xls

windows7_x64

10

reminder_1687164.xls

windows10_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    reminder_1687164.xls

  • Size

    367KB

  • Sample

    200717-6xwsv29bvs

  • MD5

    6b1a1c7461aaf71e3857232a4412e4fc

  • SHA1

    51c02cffabb7d7bf7fbc99b2d6d15a91a1eea1dd

  • SHA256

    19a1f6546cece68543aac388416cdf867ef8aee9061a6ed902d45ce49715a69c

  • SHA512

    caf685429d4d4744abdc4acfab5d9bb6072326087079ae2da227e637a86fb02f537495826740263b3bf21ecf436625e400f66c91eec30c43dec02826d0a06618

Score
10/10
macro

Malware Config

Targets

    • Target

      reminder_1687164.xls

    • Size

      367KB

    • MD5

      6b1a1c7461aaf71e3857232a4412e4fc

    • SHA1

      51c02cffabb7d7bf7fbc99b2d6d15a91a1eea1dd

    • SHA256

      19a1f6546cece68543aac388416cdf867ef8aee9061a6ed902d45ce49715a69c

    • SHA512

      caf685429d4d4744abdc4acfab5d9bb6072326087079ae2da227e637a86fb02f537495826740263b3bf21ecf436625e400f66c91eec30c43dec02826d0a06618

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks