Overview

overview

10

Static

static

10

e9251e1f_b...is.doc

windows7_x64

7

e9251e1f_b...is.doc

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9251e1f_by_Libranalysis

  • Size

    10KB

  • Sample

    210430-lpq32rnn4j

  • MD5

    e9251e1f304381e9bfcd08dbfd576ce5

  • SHA1

    dcee651dbfb6f9154a3b4170a65d88c9905fa031

  • SHA256

    2af39f18d2425772d604b14a66fa078ba7b2e7c1b252d9b9d6700f50023f72d2

  • SHA512

    a0bbe31458b3043258a0383045ca00bdc34ff217c01ffdc2159d80b5755f72d5967e7d79f386d89bc766f222194dc52cef8021b42aad9b8443ff50296cad5a0f

Score
10/10
websettings

Malware Config

Extracted

Rule
Microsoft Office WebSettings Relationship
C2

https://lidamtour.com/masivo/ala/cronsrt/corn.dot

Targets

    • Target

      e9251e1f_by_Libranalysis

    • Size

      10KB

    • MD5

      e9251e1f304381e9bfcd08dbfd576ce5

    • SHA1

      dcee651dbfb6f9154a3b4170a65d88c9905fa031

    • SHA256

      2af39f18d2425772d604b14a66fa078ba7b2e7c1b252d9b9d6700f50023f72d2

    • SHA512

      a0bbe31458b3043258a0383045ca00bdc34ff217c01ffdc2159d80b5755f72d5967e7d79f386d89bc766f222194dc52cef8021b42aad9b8443ff50296cad5a0f

    Score
    7/10

    • Abuses OpenXML format to download file from external location

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks