Overview

overview

10

Static

static

8

15d3f15f_b...s.xlsm

windows7_x64

10

15d3f15f_b...s.xlsm

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15d3f15f_by_Libranalysis

  • Size

    109KB

  • Sample

    210506-y9b5wnrpm2

  • MD5

    15d3f15fdb71e88b3c05a52395a1c30d

  • SHA1

    4289031dbde330c54cc3353a4c95cdf642f2089e

  • SHA256

    b234169c31608a2fb3085e061093b3983a5293a34da8060c43df5fa38a7c94fd

  • SHA512

    3ecc4283eb502919ab1890fee1da6ce2fb907f9f7394fcecffa2ce3b9349cabea14166909b7375e66a4e6de159153be7ab1a0285aeb89d21ad44c1ee5aca25f8

Score
10/10
macroxlm

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://91.211.91.82/44313,6048108796.dat
xlm40.dropper

http://82.117.252.199/44313,6048108796.dat
xlm40.dropper

http://45.138.157.43/44313,6048108796.dat

Targets

    • Target

      15d3f15f_by_Libranalysis

    • Size

      109KB

    • MD5

      15d3f15fdb71e88b3c05a52395a1c30d

    • SHA1

      4289031dbde330c54cc3353a4c95cdf642f2089e

    • SHA256

      b234169c31608a2fb3085e061093b3983a5293a34da8060c43df5fa38a7c94fd

    • SHA512

      3ecc4283eb502919ab1890fee1da6ce2fb907f9f7394fcecffa2ce3b9349cabea14166909b7375e66a4e6de159153be7ab1a0285aeb89d21ad44c1ee5aca25f8

    Score
    10/10
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks