Overview

overview

10

Static

static

2180.xlsx

windows7_x64

2180.xlsx

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2180.xlsx

  • Size

    38KB

  • Sample

    210311-cz9a9268g6

  • MD5

    28d75c5b8fd1d80712f3b390ce304843

  • SHA1

    1dcc3d0c446cd7abbac118af64b49e5cb1cb97f0

  • SHA256

    a77a62810bde7745f7c7eb1311159c5291dcd06c70db3c8fe5d58aa989725192

  • SHA512

    a2e38b16e060b0e58452642804af6bc38cfccc9ac80506301b07a2199f593dd31d2a82e9c1851546c383d826a07a2a48328e82fb763634652c2631ccd4774aba

Score
10/10
macroxlm

Malware Config

Extracted

Language
xlm4.0
Source

Targets

    • Target

      2180.xlsx

    • Size

      38KB

    • MD5

      28d75c5b8fd1d80712f3b390ce304843

    • SHA1

      1dcc3d0c446cd7abbac118af64b49e5cb1cb97f0

    • SHA256

      a77a62810bde7745f7c7eb1311159c5291dcd06c70db3c8fe5d58aa989725192

    • SHA512

      a2e38b16e060b0e58452642804af6bc38cfccc9ac80506301b07a2199f593dd31d2a82e9c1851546c383d826a07a2a48328e82fb763634652c2631ccd4774aba

    Score
    10/10
    macroxlm

    • Suspicious Office macro

      Office document equipped with 4.0 macros.

      macroxlm
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks