Overview

overview

10

Static

static

8

7f8b3a9a_b...s.xlsm

windows7_x64

10

7f8b3a9a_b...s.xlsm

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f8b3a9a_by_Libranalysis

  • Size

    109KB

  • Sample

    210506-p7qg5bz4rx

  • MD5

    7f8b3a9abd3230283b6af2f9a77ee7da

  • SHA1

    ba2abb881ca750df281f32fc1a8c4ab86adee9d4

  • SHA256

    89f00407704de8685478fe9ad60a06c038571ef687386567489032910f4459cb

  • SHA512

    feb60a465cf554949b48dae166cdffe39e6143596e2e6d0b9fe332546a88d65cd06a2086989608f9eb964d14f3359c51527b14e6a14841604d6469dca553a48d

Score
10/10
macroxlm

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://91.211.91.82/44313,6048108796.dat
xlm40.dropper

http://82.117.252.199/44313,6048108796.dat
xlm40.dropper

http://45.138.157.43/44313,6048108796.dat

Targets

    • Target

      7f8b3a9a_by_Libranalysis

    • Size

      109KB

    • MD5

      7f8b3a9abd3230283b6af2f9a77ee7da

    • SHA1

      ba2abb881ca750df281f32fc1a8c4ab86adee9d4

    • SHA256

      89f00407704de8685478fe9ad60a06c038571ef687386567489032910f4459cb

    • SHA512

      feb60a465cf554949b48dae166cdffe39e6143596e2e6d0b9fe332546a88d65cd06a2086989608f9eb964d14f3359c51527b14e6a14841604d6469dca553a48d

    Score
    10/10
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks