Overview

overview

8

Static

static

8

Survey.xlsm

windows7_x64

7

Survey.xlsm

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Survey.xlsm

  • Size

    10KB

  • Sample

    211025-rgr74shbcm

  • MD5

    cfb8c7e9baf060d89a03dafee9f70f79

  • SHA1

    c91feb19a81e7f5935097e9807814f9d7f6993a5

  • SHA256

    ff6194123c1287799205cb33629b116ab340aecb270102b5f9e04079f569e873

  • SHA512

    020e22baa885275e9e853c0ceab98ea410ed8e552d39fb5e3b03f40f1ec01d024a7e3c63276f368f290e261ce578e488fa8c708f652e874da11e630662a3681e

Score
8/10
macroxlm

Malware Config

Targets

    • Target

      Survey.xlsm

    • Size

      10KB

    • MD5

      cfb8c7e9baf060d89a03dafee9f70f79

    • SHA1

      c91feb19a81e7f5935097e9807814f9d7f6993a5

    • SHA256

      ff6194123c1287799205cb33629b116ab340aecb270102b5f9e04079f569e873

    • SHA512

      020e22baa885275e9e853c0ceab98ea410ed8e552d39fb5e3b03f40f1ec01d024a7e3c63276f368f290e261ce578e488fa8c708f652e874da11e630662a3681e

    Score
    7/10

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks