Overview

overview

10

Static

static

8

Scan761259.docm

windows7_x64

10

Scan761259.docm

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Scan761259.doc

  • Size

    123KB

  • Sample

    220522-geyl1agdc8

  • MD5

    d3b2a31b7b7a08beb2522c83b473cf09

  • SHA1

    9eaed0b9761e115f899c86bf058da61a19067850

  • SHA256

    a2d68c89f88f4b9517bac131c7557899994baf340587804d9534f9d10719bc6a

  • SHA512

    bc67c2fcacce9856f5d9ad464002819c313e40cc6168d007568be850899ad4831107c82c02e8ce28f08db51e26d5ccead16055cdb6324cfcf12cdccabeda95d4

Score
10/10
macro

Malware Config

Targets

    • Target

      Scan761259.doc

    • Size

      123KB

    • MD5

      d3b2a31b7b7a08beb2522c83b473cf09

    • SHA1

      9eaed0b9761e115f899c86bf058da61a19067850

    • SHA256

      a2d68c89f88f4b9517bac131c7557899994baf340587804d9534f9d10719bc6a

    • SHA512

      bc67c2fcacce9856f5d9ad464002819c313e40cc6168d007568be850899ad4831107c82c02e8ce28f08db51e26d5ccead16055cdb6324cfcf12cdccabeda95d4

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks