Overview

overview

10

Static

static

8

1622576d_b...is.pps

windows7_x64

10

1622576d_b...is.pps

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1622576d_by_Libranalysis

  • Size

    707KB

  • Sample

    210505-b4lfhda4dx

  • MD5

    1622576dd5cc993ae42f5c35b4b9ed2f

  • SHA1

    6071d99ea546e6d74656bf8114bcd7a663eb84ba

  • SHA256

    c1110237231589eb7cb435f52783b0eb917baca45b075e8f78d5b78a0fe66688

  • SHA512

    6d9501e71c7095050b1bd8a2ca467f926b008c6f36c17ce673b012730e3fc33dc29fd513e875635e6fc6cc446e57a0572477f82df038d4d81870a78447a29804

Score
10/10
macromacro_on_action

Malware Config

Targets

    • Target

      1622576d_by_Libranalysis

    • Size

      707KB

    • MD5

      1622576dd5cc993ae42f5c35b4b9ed2f

    • SHA1

      6071d99ea546e6d74656bf8114bcd7a663eb84ba

    • SHA256

      c1110237231589eb7cb435f52783b0eb917baca45b075e8f78d5b78a0fe66688

    • SHA512

      6d9501e71c7095050b1bd8a2ca467f926b008c6f36c17ce673b012730e3fc33dc29fd513e875635e6fc6cc446e57a0572477f82df038d4d81870a78447a29804

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks