Overview

overview

10

Static

static

8

documento_444.xls

windows7_x64

10

documento_444.xls

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16d83785ec1540ae2246d769bd6f04aeb115e7a99d3d6800dc778165e1d46519

  • Size

    83KB

  • Sample

    220521-m9mqwagder

  • MD5

    22c6cdf1df8805b90d8a93a611a12672

  • SHA1

    9782095751fb528ca2881f0b113690cd7502a246

  • SHA256

    16d83785ec1540ae2246d769bd6f04aeb115e7a99d3d6800dc778165e1d46519

  • SHA512

    9b9e91d13917065b96db702ac6c1ce0b9ea7dcafa20e397592b0c1984d8e150070dd70d5fdea45805f222e09f2f25a4d9ab4e7e1e17eb33e438f2f5a0d4cb5ff

Score
10/10
macroxlm

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://web.golden-goblin.com/setup.exe

Targets

    • Target

      documento_444.xls

    • Size

      180KB

    • MD5

      01fec3e0f54c834f90d33f23ced26e6b

    • SHA1

      3584e950f70ab860ee936d86ce1d75791b3eb3d9

    • SHA256

      67bd66ce3e64e2f33f3a4d2f202cfcc0e47f0b4c7f9a85fb7b4c47a979b6fe03

    • SHA512

      43da6f0bbad71657c4f3c9b2af10b0592e8f3bce2cd11f7ca38d02b28db5bb7d50dde6d9d1e7562fdc3d8ebb6b1b785edc70a2fca68cac601a8ecb409e5fc635

    Score
    10/10
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks