Overview

overview

10

Static

static

8

3510495740...1.xlsm

windows7_x64

10

3510495740...1.xlsm

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3510495740-05102021.xlsm

  • Size

    110KB

  • Sample

    210510-e4km9q7l6n

  • MD5

    87f087464a71916519e875f7db1bb12a

  • SHA1

    b570630c0955c91c382ae361d7b85fd19f86a626

  • SHA256

    d84c44f0110f258f1bec8f15358a15b01acba70a7ed5989df7b4304b185c8473

  • SHA512

    12261e5eff2a46147c87f1bfbb82d4676360c58b7734cdb98597875ab17e4ab29d46d059d2bec273e88c8e98d6c7b522d88030231615d221cdadfa10f0a387d3

Score
10/10
macroxlm

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://195.123.235.1/44313,6048108796.dat
xlm40.dropper

http://45.67.230.159/44313,6048108796.dat
xlm40.dropper

http://51.195.38.32/44313,6048108796.dat

Targets

    • Target

      3510495740-05102021.xlsm

    • Size

      110KB

    • MD5

      87f087464a71916519e875f7db1bb12a

    • SHA1

      b570630c0955c91c382ae361d7b85fd19f86a626

    • SHA256

      d84c44f0110f258f1bec8f15358a15b01acba70a7ed5989df7b4304b185c8473

    • SHA512

      12261e5eff2a46147c87f1bfbb82d4676360c58b7734cdb98597875ab17e4ab29d46d059d2bec273e88c8e98d6c7b522d88030231615d221cdadfa10f0a387d3

    Score
    10/10
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks