Overview

overview

10

Static

static

invoice te...9.docx

windows7_x64

10

invoice te...9.docx

windows10_x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    invoice template 33142738819.docx
  • Size 477KB
  • Sample211201-tzs88sghe2
  • SHA256 b41c77a8619909fd51a4208beb6f69e880ef49ac7bfdf0844b948c6370d9b85f
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Targets

    • Target
      invoice template 33142738819.docx
    • Size 477KB
    • SHA256 b41c77a8619909fd51a4208beb6f69e880ef49ac7bfdf0844b948c6370d9b85f
    • MD5 SHA1 SHA512
    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    • Abuses OpenXML format to download file from external location

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks