Overview

overview

10

Static

static

8

SecuriteIn...8.xlsm

windows7_x64

10

SecuriteIn...8.xlsm

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Heur.6720.4038

  • Size

    164KB

  • Sample

    210421-8l3j2v5a5j

  • MD5

    0d078f062bf55f9731c74ad03c8b7e7d

  • SHA1

    efc993ad607de2d59e58821f8b762e7c89a7acb9

  • SHA256

    ce0f03fcee0d0cddba35b3053ea5d24ba14ed57d8112a508546fe4d3d9d3c0e2

  • SHA512

    2493c4754243597d13068d651a07dba57f34e0604f4c95c3ea68163f0967dfd15dac95e41fcb3c8f29fd7c545b5665d951aaffd2a42c3c1307f7e1115fc014bb

Score
10/10
macro

Malware Config

Targets

    • Target

      SecuriteInfo.com.Heur.6720.4038

    • Size

      164KB

    • MD5

      0d078f062bf55f9731c74ad03c8b7e7d

    • SHA1

      efc993ad607de2d59e58821f8b762e7c89a7acb9

    • SHA256

      ce0f03fcee0d0cddba35b3053ea5d24ba14ed57d8112a508546fe4d3d9d3c0e2

    • SHA512

      2493c4754243597d13068d651a07dba57f34e0604f4c95c3ea68163f0967dfd15dac95e41fcb3c8f29fd7c545b5665d951aaffd2a42c3c1307f7e1115fc014bb

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks