document-1367992196.xls

General
Target

document-1367992196.xls

Size

331KB

Sample

201126-ce29zgwzga

Score
10 /10
MD5

1d9ec88725c31bc97045ff4a78318d63

SHA1

2d45a61c6245b2440381c79992ee30cde3417479

SHA256

ec12e927e193005a827df630e66929e18666f48a5c2466af0a5720a7ccc242cb

SHA512

673c8d1962fd00546e56e47670516215a0635efb3cc72a42ea012f1837acd6d9ffcdb927d6a348db2215573f51a4df8a32d648e16c2840864ed83f13486c232a

Malware Config
Targets
Target

document-1367992196.xls

MD5

1d9ec88725c31bc97045ff4a78318d63

Filesize

331KB

Score
10 /10
SHA1

2d45a61c6245b2440381c79992ee30cde3417479

SHA256

ec12e927e193005a827df630e66929e18666f48a5c2466af0a5720a7ccc242cb

SHA512

673c8d1962fd00546e56e47670516215a0635efb3cc72a42ea012f1837acd6d9ffcdb927d6a348db2215573f51a4df8a32d648e16c2840864ed83f13486c232a

Signatures

  • Process spawned unexpected child process

    Description

    This typically indicates the parent process was compromised via an exploit or macro.

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
        Execution
          Exfiltration
            Impact
              Initial Access
                Lateral Movement
                  Persistence
                    Privilege Escalation
                      Tasks

                      static1

                      8/10

                      behavioral1

                      10/10

                      behavioral2

                      10/10