Overview

overview

10

Static

static

8

Complaint-...1.xlsm

windows7_x64

10

Complaint-...1.xlsm

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Complaint-1192571481-05062021.xlsm

  • Size

    110KB

  • Sample

    210506-mdesr4kge6

  • MD5

    52495058069bec6c8605780ac1142f30

  • SHA1

    36a23e388db51469b45dc44352ff7dd29bd672c5

  • SHA256

    06b8de5e8597f3424cf9ae9ed7ee38ad1555a3252799fd50d6eead7592aede03

  • SHA512

    c09988a603d5d5cab8c126f6563202804a2a9553dc5e492270cb274806ab83ebfa67f2802811f1d033926e07354b155071b8d8781c22d1c629ec126fdb7a47f8

Score
10/10
macroxlm

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://91.211.91.83/44313,6048108796.dat
xlm40.dropper

http://190.14.37.46/44313,6048108796.dat
xlm40.dropper

http://185.244.149.204/44313,6048108796.dat

Targets

    • Target

      Complaint-1192571481-05062021.xlsm

    • Size

      110KB

    • MD5

      52495058069bec6c8605780ac1142f30

    • SHA1

      36a23e388db51469b45dc44352ff7dd29bd672c5

    • SHA256

      06b8de5e8597f3424cf9ae9ed7ee38ad1555a3252799fd50d6eead7592aede03

    • SHA512

      c09988a603d5d5cab8c126f6563202804a2a9553dc5e492270cb274806ab83ebfa67f2802811f1d033926e07354b155071b8d8781c22d1c629ec126fdb7a47f8

    Score
    10/10
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks