Overview

overview

10

Static

static

8

c10f0a9f60...8.xlsm

windows7_x64

10

c10f0a9f60...8.xlsm

windows10_x64

1

Resubmissions

07-05-2021 06:43

210507-k8cv1f6tns 10

07-05-2021 06:35

210507-8avcflmfrn 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6581139239895040.zip

  • Size

    93KB

  • Sample

    210507-8avcflmfrn

  • MD5

    20990a2d8fa8b3f3e6f38a811b6907b2

  • SHA1

    cf052abe40cc96a8fc9ed1bc988070261e980d51

  • SHA256

    c9ec26cb8bfd322cf188dc9e5138525a46fc2ce51089dca68c5d027139f21b0b

  • SHA512

    23e3451a5bd0700c112c16efdc0fe06f38aa0d4c8d9ea32cab464b6448b73a088e7d8c20d2803fb84399102f4744c409918c91ad8d5ef3ce8556faf287717212

Score
10/10
macroxlm

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://185.82.219.131/44313,6048108796.dat
xlm40.dropper

http://45.84.1.195/44313,6048108796.dat
xlm40.dropper

http://185.238.0.40/44313,6048108796.dat

Targets

    • Target

      c10f0a9f60b971184e3bab85b430daee3c51e2f3351b101e64b7dd4e9417fe28

    • Size

      112KB

    • MD5

      2614414ef198ae66125912c2844dc012

    • SHA1

      04aff804486cd8db99734a7a341554e1e4f376bf

    • SHA256

      c10f0a9f60b971184e3bab85b430daee3c51e2f3351b101e64b7dd4e9417fe28

    • SHA512

      b5a5d5c7d2b9ab05c4788d920bf4097a08fd73c860ce5e442918c311c6d5bcfd37337b9f734941c977067dbb5de49e76ecceaf0207b5b6ce813bc745487db6e4

    Score
    10/10
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks