Overview

overview

10

Static

static

Booking & ...f.ppam

windows7_x64

10

Booking & ...f.ppam

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Booking & Credit Card Details ,pdf.ppam
  • Size 14KB
  • Sample210719-32wecd2pej
  • SHA256 bd6b76890564812dd399d1a15f8af070d44b7467ada40da9f94975e4ecf4e1e7
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Targets

    • Target
      Booking & Credit Card Details ,pdf.ppam
    • Size 14KB
    • SHA256 bd6b76890564812dd399d1a15f8af070d44b7467ada40da9f94975e4ecf4e1e7
    • MD5 SHA1 SHA512
    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks