Overview

overview

10

Static

static

8

document-1...90.xls

windows7_x64

10

document-1...90.xls

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    document-1462893690.xls

  • Size

    331KB

  • Sample

    201126-wrhx9k6mcn

  • MD5

    24dfeede02ed4c7d0d2eb6fc0c3b8add

  • SHA1

    8c2c93eb5cb4543bfa2b323df14f87ec87d9e1c3

  • SHA256

    a24839909a0b5b154debd7ff9b7a78bb87b135883c2b39b011953240c8a70a10

  • SHA512

    2cbf8076b250f21ddf9b21102a7d9a329baa8c14bf0fbd5e505ee003db752ce4ecd204f867b83104df72e2ed295530683e958eff97299655363196e06193940a

Score
10/10
macro

Malware Config

Targets

    • Target

      document-1462893690.xls

    • Size

      331KB

    • MD5

      24dfeede02ed4c7d0d2eb6fc0c3b8add

    • SHA1

      8c2c93eb5cb4543bfa2b323df14f87ec87d9e1c3

    • SHA256

      a24839909a0b5b154debd7ff9b7a78bb87b135883c2b39b011953240c8a70a10

    • SHA512

      2cbf8076b250f21ddf9b21102a7d9a329baa8c14bf0fbd5e505ee003db752ce4ecd204f867b83104df72e2ed295530683e958eff97299655363196e06193940a

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks