Overview

overview

10

Static

static

8

emotet_v6

windows10_x64

10

emotet_doc

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab01a85308cf2fce06a2402287df4d947b0a89250d30d7289c0b63a07eb00503.xls

  • Size

    106KB

  • Sample

    220329-vgmt6sgeh2

  • MD5

    a87543e552ee059b2c1a68c26529579b

  • SHA1

    76b384a0f3f314d0b6b26d7ce3a060c2e5a1f424

  • SHA256

    ab01a85308cf2fce06a2402287df4d947b0a89250d30d7289c0b63a07eb00503

  • SHA512

    55f1e968b37c1040782c8b6559a215cde9ba5bad89ebe4d0dbb94b56e6267789e585dc63c0ab369703adca6ab0bfe5ce56acb993a3986fa6392ab826f891a80d

Score
10/10
macroxlm

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://fccatinsaat.com/wp-content/Cw3aR6792f/
xlm40.dropper

http://fabulouswebdesign.net/invoice/m/
xlm40.dropper

http://freemanylaluz.com/downloads/8dR9pgNBFtz/
xlm40.dropper

https://freewebsitedirectory.com/wp-includes/v2qFAlMZELRkxbz/
xlm40.dropper

http://futaba.youchien.net/wp-content/sSJqJ/
xlm40.dropper

http://dominionai.org/wp-includes/T5qXAR8p5/

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://fccatinsaat.com/wp-content/Cw3aR6792f/
xlm40.dropper

http://fabulouswebdesign.net/invoice/m/
xlm40.dropper

http://freemanylaluz.com/downloads/8dR9pgNBFtz/
xlm40.dropper

https://freewebsitedirectory.com/wp-includes/v2qFAlMZELRkxbz/

Targets

    • Target

      ab01a85308cf2fce06a2402287df4d947b0a89250d30d7289c0b63a07eb00503.xls

    • Size

      106KB

    • MD5

      a87543e552ee059b2c1a68c26529579b

    • SHA1

      76b384a0f3f314d0b6b26d7ce3a060c2e5a1f424

    • SHA256

      ab01a85308cf2fce06a2402287df4d947b0a89250d30d7289c0b63a07eb00503

    • SHA512

      55f1e968b37c1040782c8b6559a215cde9ba5bad89ebe4d0dbb94b56e6267789e585dc63c0ab369703adca6ab0bfe5ce56acb993a3986fa6392ab826f891a80d

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks