Overview

overview

10

Static

static

8

Copy-57585...1.xlsm

windows7_x64

10

Copy-57585...1.xlsm

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Copy-575854953-05102021.xlsm

  • Size

    114KB

  • Sample

    210510-3cbjn2d3hn

  • MD5

    75f1565039392ebedcfd1157efc002d2

  • SHA1

    3b39fba555327d6dfc7577a601a03933fe6ee7f4

  • SHA256

    096d78cc7092bb4db5189c9b56245b1cdea76c88e84f01ab3bae1d41056ca693

  • SHA512

    544445c561dbe1a394bcadb72e15fd353eb052c1365c8b873395cc4e3369f7b6c250d8604a2af0d0736721cb31fa69e2fc48dea6b4fea0c340979f9cf4dac768

Score
10/10
macroxlm

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://185.14.31.59/44313,6048108796.dat
xlm40.dropper

http://45.138.157.63/44313,6048108796.dat
xlm40.dropper

http://167.114.48.59/44313,6048108796.dat

Targets

    • Target

      Copy-575854953-05102021.xlsm

    • Size

      114KB

    • MD5

      75f1565039392ebedcfd1157efc002d2

    • SHA1

      3b39fba555327d6dfc7577a601a03933fe6ee7f4

    • SHA256

      096d78cc7092bb4db5189c9b56245b1cdea76c88e84f01ab3bae1d41056ca693

    • SHA512

      544445c561dbe1a394bcadb72e15fd353eb052c1365c8b873395cc4e3369f7b6c250d8604a2af0d0736721cb31fa69e2fc48dea6b4fea0c340979f9cf4dac768

    Score
    10/10
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks