Overview

overview

4

Static

static

RFQ 4917 2...AA.doc

windows7_x64

4

RFQ 4917 2...AA.doc

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RFQ 4917 21-006-AA.doc

  • Size

    395KB

  • Sample

    210408-r6d775h34x

  • MD5

    47d954d5fe653943fbc170f75b8778ed

  • SHA1

    58e5bc6777ccc5d82a9e21f44e62ccec047ca77e

  • SHA256

    c97ccb44ae6a0d90cce4df1259fd99a135a5aa3f0aec62cf1b1dabeb359ca14f

  • SHA512

    348569df3a50b11456eed49f9691913285fb37e39894184bf9da65a2ec9acd3304f4f046d08a38fedc91195be5d70287c17db7405f1717c0bf640ca2f6d1c9c1

Score
4/10

Malware Config

Targets

    • Target

      RFQ 4917 21-006-AA.doc

    • Size

      395KB

    • MD5

      47d954d5fe653943fbc170f75b8778ed

    • SHA1

      58e5bc6777ccc5d82a9e21f44e62ccec047ca77e

    • SHA256

      c97ccb44ae6a0d90cce4df1259fd99a135a5aa3f0aec62cf1b1dabeb359ca14f

    • SHA512

      348569df3a50b11456eed49f9691913285fb37e39894184bf9da65a2ec9acd3304f4f046d08a38fedc91195be5d70287c17db7405f1717c0bf640ca2f6d1c9c1

    Score
    4/10
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Exploitation for Client Execution

1
T1203

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks