Overview

overview

10

Static

static

10

Swift.docx

windows7-x64

7

Swift.docx

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Swift.docx

  • Size

    10KB

  • Sample

    220907-sjmabacdb3

  • MD5

    59546fc18fe1ab01985859564d927fe3

  • SHA1

    a786495e609f92ab3be4c02e6c887389af3afdd5

  • SHA256

    a011bb18bfc4dfd4398ff8fc7650ffa36c9ac02a9cd9e96217e96b1f5a24cbde

  • SHA512

    623e6ecd9e6c5200ab46f54179a35458f3c34dc5ae5c8f59e89299e4fbf2f5a89bcce389053692ddf98da501ca61c855f1ff870cee6e87472e2e5f80f5c683c3

  • SSDEEP

    192:ScIMmtPf+CUG/bA3/w2O7rdlJFmQDZ7rhhap30KV:SPXumAO7jJFmIZfhMFb

Score
10/10
websettings

Malware Config

Extracted

Rule
Microsoft Office WebSettings Relationship
C2

https://[email protected]/lYjQO

Targets

    • Target

      Swift.docx

    • Size

      10KB

    • MD5

      59546fc18fe1ab01985859564d927fe3

    • SHA1

      a786495e609f92ab3be4c02e6c887389af3afdd5

    • SHA256

      a011bb18bfc4dfd4398ff8fc7650ffa36c9ac02a9cd9e96217e96b1f5a24cbde

    • SHA512

      623e6ecd9e6c5200ab46f54179a35458f3c34dc5ae5c8f59e89299e4fbf2f5a89bcce389053692ddf98da501ca61c855f1ff870cee6e87472e2e5f80f5c683c3

    • SSDEEP

      192:ScIMmtPf+CUG/bA3/w2O7rdlJFmQDZ7rhhap30KV:SPXumAO7jJFmIZfhMFb

    Score
    7/10

    • Abuses OpenXML format to download file from external location

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks