document-1508320956.xls

General
Target

document-1508320956.xls

Size

331KB

Sample

201126-3b8ffvn9vn

Score
10 /10
MD5

98ebd0c8c6367ae952a23e7f0ea3160b

SHA1

a74c0f1d66653eaf44f2e0c77cba84d578ddec40

SHA256

a12aba944d32e1437cda7117464857821e85b6914d02ab55cf4465ab4dc94ac6

SHA512

27dc0eee7adba804f0696a40a73ab1aaa0db19ab59c9f8e6819e6e86d76d90d2b753126fc91ca53f3bb4b79e2f3fa980a9d85f44bf78e70120aad969b2ab3720

Malware Config
Targets
Target

document-1508320956.xls

MD5

98ebd0c8c6367ae952a23e7f0ea3160b

Filesize

331KB

Score
10 /10
SHA1

a74c0f1d66653eaf44f2e0c77cba84d578ddec40

SHA256

a12aba944d32e1437cda7117464857821e85b6914d02ab55cf4465ab4dc94ac6

SHA512

27dc0eee7adba804f0696a40a73ab1aaa0db19ab59c9f8e6819e6e86d76d90d2b753126fc91ca53f3bb4b79e2f3fa980a9d85f44bf78e70120aad969b2ab3720

Signatures

  • Process spawned unexpected child process

    Description

    This typically indicates the parent process was compromised via an exploit or macro.

Related Tasks

behavioral1 behavioral2
MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
        Discovery
        Execution
          Exfiltration
            Impact
              Initial Access
                Lateral Movement
                  Persistence
                    Privilege Escalation
                      Tasks

                      static1

                      8/10

                      behavioral1

                      10/10

                      behavioral2

                      10/10