Overview

overview

10

Static

static

8

Ace-mexico.xls

windows7_x64

10

Ace-mexico.xls

windows10-2004_x64

10

Resubmissions

11/05/2022, 23:50

220511-3vnbvsgcap10

11/05/2022, 20:21

220511-y4y3hahfa610

Sharing

Copy URL Twitter E-mail

General

  • Target
    Ace-mexico.xls
  • Size 40KB
  • Sample220511-y4y3hahfa6
  • SHA256 cb1e2bebe4a60f5fc9f44cce7962ed1ade2a297faadf66d1e59a7d0062d1ebfd
  • MD5 SHA1 SHA512
Score
10/10
emotetbankermacrotrojanxlm

Malware Config

Extracted

Language

  • xlm4.0

Source
URLs
  • xlm40.dropper

    http://easiercommunications.com/wp-content/w/
  • xlm40.dropper

    http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/
  • xlm40.dropper

    https://www.whow.fr/wp-includes/H54Fgj0tG/

Extracted

Language

  • xlm4.0

Source
URLs
  • xlm40.dropper

    http://easiercommunications.com/wp-content/w/
  • xlm40.dropper

    http://dulichdichvu.net/libraries/QhtrjCZymLp5EbqOdpKk/

Targets

    • Target
      Ace-mexico.xls
    • Size 40KB
    • SHA256 cb1e2bebe4a60f5fc9f44cce7962ed1ade2a297faadf66d1e59a7d0062d1ebfd
    • MD5 SHA1 SHA512
    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Downloads MZ/PE file

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks