Overview

overview

10

Static

static

8

9519ce3d10...96.doc

windows7_x64

10

9519ce3d10...96.doc

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9519ce3d10a2a31cde1cf635f1b68b96.doc

  • Size

    30KB

  • Sample

    210117-gsyrfqmn62

  • MD5

    9519ce3d10a2a31cde1cf635f1b68b96

  • SHA1

    cda0e8642d2a73332fb673be22fa41549ad68f3b

  • SHA256

    1a48160aeaa458f668954f9eb79f9dc5bd8259a00adf10ecfac3acc9e6347f24

  • SHA512

    35c6e4f1b46e1fff3acae275daebbca931760596902c931e6fe24e2d8440a500831893381dc96ebc037defbfafa76a8aecb162e8b806a03935fc45af0ba51926

Score
10/10
macroxlm

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://tinyurl.com/ybyymhnd

Targets

    • Target

      9519ce3d10a2a31cde1cf635f1b68b96.doc

    • Size

      30KB

    • MD5

      9519ce3d10a2a31cde1cf635f1b68b96

    • SHA1

      cda0e8642d2a73332fb673be22fa41549ad68f3b

    • SHA256

      1a48160aeaa458f668954f9eb79f9dc5bd8259a00adf10ecfac3acc9e6347f24

    • SHA512

      35c6e4f1b46e1fff3acae275daebbca931760596902c931e6fe24e2d8440a500831893381dc96ebc037defbfafa76a8aecb162e8b806a03935fc45af0ba51926

    Score
    10/10
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks