General

  • Target
    files_06.28.2021.doc
  • Size 50KB
  • Sample210629-9m72l4klda
  • SHA256 fd4e3fa8a8d9b59e58e08119e9aba18847b932c1ec8051b0544ebde855c19d46
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Targets

    • Target
      files_06.28.2021.doc
    • Size 50KB
    • SHA256 fd4e3fa8a8d9b59e58e08119e9aba18847b932c1ec8051b0544ebde855c19d46
    • MD5 SHA1 SHA512
    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Blocklisted process makes network request

MITRE ATT&CK Enterprise v6

Tasks