Overview

overview

10

Static

static

8

Wt-098606493.xlsm

windows7_x64

10

Wt-098606493.xlsm

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Wt-098606493.xlsm

  • Size

    185KB

  • Sample

    210720-fpbq6my8jx

  • MD5

    c8f8edb5dce7ada6d8ea864b2cd43743

  • SHA1

    4b15f33bc4c8aacec0d8b7c23da99d1501539edc

  • SHA256

    e5a821212ceb9a90613430d8971348f07999a8cbb70b32b1f6d9ddbbae0225c5

  • SHA512

    c88ea4c75fc0d81ae71ca83b30c850f71c4f8308a08598c615619853d529568f39c3f551694cc9c754cef0afae0604ef77d5cbff3d5e4114401a68a6d81d3b62

Score
10/10
macroxlm

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://clientportal.download/123.php

Targets

    • Target

      Wt-098606493.xlsm

    • Size

      185KB

    • MD5

      c8f8edb5dce7ada6d8ea864b2cd43743

    • SHA1

      4b15f33bc4c8aacec0d8b7c23da99d1501539edc

    • SHA256

      e5a821212ceb9a90613430d8971348f07999a8cbb70b32b1f6d9ddbbae0225c5

    • SHA512

      c88ea4c75fc0d81ae71ca83b30c850f71c4f8308a08598c615619853d529568f39c3f551694cc9c754cef0afae0604ef77d5cbff3d5e4114401a68a6d81d3b62

    Score
    10/10
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks