Overview

overview

10

Static

static

8

78db205170...b.docm

windows7-x64

10

78db205170...b.docm

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    78db20517031a83d7cbdd24023e0e556e148af78f12ed292c3f7fca4785dcb4b

  • Size

    123KB

  • Sample

    220725-e5383aehfr

  • MD5

    673d68e62f78d818799583b59927e372

  • SHA1

    f29fec1645e9597502a7d03e9398f104385fa20e

  • SHA256

    78db20517031a83d7cbdd24023e0e556e148af78f12ed292c3f7fca4785dcb4b

  • SHA512

    6fb9edcd090faba6f1adf5c806d32a7e2cc8af4f1cecea325301bd27c0e7bf553cdd6423b406992300637451ad0fe6fd90ca1fe2382ddb6f9e87ef23417be568

Score
10/10
macro

Malware Config

Targets

    • Target

      78db20517031a83d7cbdd24023e0e556e148af78f12ed292c3f7fca4785dcb4b

    • Size

      123KB

    • MD5

      673d68e62f78d818799583b59927e372

    • SHA1

      f29fec1645e9597502a7d03e9398f104385fa20e

    • SHA256

      78db20517031a83d7cbdd24023e0e556e148af78f12ed292c3f7fca4785dcb4b

    • SHA512

      6fb9edcd090faba6f1adf5c806d32a7e2cc8af4f1cecea325301bd27c0e7bf553cdd6423b406992300637451ad0fe6fd90ca1fe2382ddb6f9e87ef23417be568

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks