Overview

overview

4

Static

static

4

BOOKING HL...11.pdf

windows7_x64

1

BOOKING HL...11.pdf

windows10-2004_x64

1

P220425-01...0.xlsm

windows7_x64

1

P220425-01...0.xlsm

windows10-2004_x64

1

P220425-02...).xlsm

windows7_x64

1

P220425-02...).xlsm

windows10-2004_x64

1

P220425-03...).xlsm

windows7_x64

1

P220425-03...).xlsm

windows10-2004_x64

1

P220425-04...C.xlsm

windows7_x64

1

P220425-04...C.xlsm

windows10-2004_x64

1

PACKING LI...).xlsx

windows7_x64

1

PACKING LI...).xlsx

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2285f82f2c472d1df76df52a02a8587f

  • Size

    1.4MB

  • Sample

    220426-l3t1yagaep

  • MD5

    2285f82f2c472d1df76df52a02a8587f

  • SHA1

    516cbf802f3180af4f40945e143f6b1d2441eb95

  • SHA256

    fc989092569990ed9ee027426702124af150f8f651a2d87080db4534f750aeb0

  • SHA512

    8997e24943cf7f238b78fc0d64ab459518ea50b9825658f985b0fcc2df4120b783d3a7c4d4338f0aa9e09dc98e7688d69e28ceff70808a37ec198ef4583e6df1

Score
4/10
linkpdf

Malware Config

Targets

    • Target

      BOOKING HL-64133514 HKHKG 8110220011.pdf

    • Size

      65KB

    • MD5

      c17124d50d0126f279d6d22863485771

    • SHA1

      1e15a5c8a6abcd9880bfc07d68164f87c1bf0003

    • SHA256

      d9a52759e6f55a13ec0d1778dc26c79df7453093273ac8a043be806241cb0400

    • SHA512

      bfc40af14c4965d824259dbf0ecaa8dd621f2cdbeeee12216c55885079ab2fa3fb3189d65106e0695a6705ae78639eba2a5dbfd211315f30da7545c58d0958fa

    Score
    1/10
    behavioral1behavioral2

    • Target

      P220425-01 DAT 248270.xlsm

    • Size

      17KB

    • MD5

      b5444bfaa086af82c4ee4eada846e9dd

    • SHA1

      d7b96e34b12aa433a27abe725a9119a86f7dea46

    • SHA256

      93f0f9c656754db729f5e9f4828ae49dda30f55f676e5e3e4179cb62434f00a4

    • SHA512

      79d9945d0510908b8b0a9fce1dd75c5261bee89b8718dc5c0a21bca250909d92fca6e5390f18d7df754619b1fc2a768ea8817987ce4d2baeae1074f5032f5ab0

    Score
    1/10
    behavioral3behavioral4

    • Target

      P220425-02 DAT 242718 1x40 SOC (1).xlsm

    • Size

      17KB

    • MD5

      3958d6b6434a5edcbf0c20eb979a95ed

    • SHA1

      2e6199d61fd1f1a06c37f84e28da137613b03b75

    • SHA256

      2503b90b9188ae540a22b5684f2ed1eaa6c732d3829cd7f37ca866f11a23d3a3

    • SHA512

      20da1b4f24db04bed84122499839c5701046bf5519db1d0cb81f9c09f912c04478369f141bd98afc386b463a933814a60e3e627c9813947cd22cf4317d1278fd

    Score
    1/10
    behavioral5behavioral6

    • Target

      P220425-03 DAT 222571 1x40 SOC (1).xlsm

    • Size

      17KB

    • MD5

      f044cb03d8f8525b021aa1a98c3bd93d

    • SHA1

      d6c1122879d3f389b5108e5325e32275e82f10b3

    • SHA256

      ac287be5d2b20d31522bf86506de618dda76b009bfe8f213468801a1cec4fdea

    • SHA512

      74765a362a3aef09c2f3f3f576135e98b88df1d08bc78a0fb2ef77c879998ad006303ddcf6638e5d417e30e98c1a2dbe601cbe4308c1c293756f2f161bf848ea

    Score
    1/10
    behavioral7behavioral8

    • Target

      P220425-04 DAT 218605 1x40 SOC.xlsm

    • Size

      17KB

    • MD5

      d4be1041282765ab5691a06db0497508

    • SHA1

      6aeae30fb042d56f629d058d433cd102122a0047

    • SHA256

      75666db7265b903fec2a4054904a07ada9909361a804be1cdb77bad844642641

    • SHA512

      d4e09e94a03318e067dd68ad569d0cb6054994d2e92292a33e5a324285733299af9d20cfe73ece9308765222d4ea0ba5a3a35a10366e6ad34e094250358793ba

    Score
    1/10
    behavioral9behavioral10

    • Target

      PACKING LIST 08-04-2022 (1).xlsx

    • Size

      820KB

    • MD5

      eff278990dd7af29286121a82269acf9

    • SHA1

      c725732adcfa275e7cb0f99e028fdb4d5cdeb20e

    • SHA256

      219b8b3c79bd8b874d9482c46c014def9f00122876bc2667f7070f7252ed33bf

    • SHA512

      6e79e5b2883700dfa4b772fbe2302c28b971b48edb65e68d3d1dd6ba068f15d7f1b5ca5e980fc4e82ff5944bd1861d10c682d9e913e1a00e1c406ccc49afb132

    Score
    1/10
    behavioral11behavioral12

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

6
T1112

Credential Access

Discovery

Query Registry

11
T1012

System Information Discovery

11
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks