Overview

overview

8

Static

static

8

contabilit...69.doc

windows7_x64

5

contabilit...69.doc

windows10_x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    contabilita_7216669.doc

  • Size

    81KB

  • Sample

    210122-tdpxyk82j2

  • MD5

    816ca12639b877ad34ca10ab9986bb7c

  • SHA1

    b4c30a2ef464e338b8af2bb1ccd8ab00451ff6d9

  • SHA256

    458c0e3b7f0583b2a320909b0304e5416dbfd71b390bb0f8eb808f507ccc756e

  • SHA512

    25a877f90b6447ba86082548bf6debea56c75a973aac9ad67dc565b2583e7fa1562c7848f645fc8840062824c60cc0781ff6cfeac23a930ebc742845b169e816

Score
8/10
macroransomware

Malware Config

Targets

    • Target

      contabilita_7216669.doc

    • Size

      81KB

    • MD5

      816ca12639b877ad34ca10ab9986bb7c

    • SHA1

      b4c30a2ef464e338b8af2bb1ccd8ab00451ff6d9

    • SHA256

      458c0e3b7f0583b2a320909b0304e5416dbfd71b390bb0f8eb808f507ccc756e

    • SHA512

      25a877f90b6447ba86082548bf6debea56c75a973aac9ad67dc565b2583e7fa1562c7848f645fc8840062824c60cc0781ff6cfeac23a930ebc742845b169e816

    Score
    5/10
    ransomware

    • Enumerates physical storage devices

      Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks