General

  • Target

    modal_2276.xlsb

  • Size

    66KB

  • Sample

    210316-c477gqn84j

  • MD5

    d73a7db9f19b66c09e831dc8b9de6e8a

  • SHA1

    74532462f7debc64ec2bd9da5dfee6514db60309

  • SHA256

    6902a1d34acdc62f6f9b0722852c9fd4a0ec8d05d9ccd936257d7a0224e7c3e4

  • SHA512

    7a87ae3e33e88c15d1e17eb629f5703f73ebb1bd73478ce121911382b356b8feea01a7ae9b46b028d396174cd991154fcfa4fb3f143d51163484c4a1dc6e7f3d

Score
10/10

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://trimestre.casa/register.jpg

Targets

    • Target

      modal_2276.xlsb

    • Size

      66KB

    • MD5

      d73a7db9f19b66c09e831dc8b9de6e8a

    • SHA1

      74532462f7debc64ec2bd9da5dfee6514db60309

    • SHA256

      6902a1d34acdc62f6f9b0722852c9fd4a0ec8d05d9ccd936257d7a0224e7c3e4

    • SHA512

      7a87ae3e33e88c15d1e17eb629f5703f73ebb1bd73478ce121911382b356b8feea01a7ae9b46b028d396174cd991154fcfa4fb3f143d51163484c4a1dc6e7f3d

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

MITRE ATT&CK Enterprise v6

Tasks