Overview

overview

8

Static

static

44e65a641f...5.xlsx

windows7-x64

8

44e65a641f...5.xlsx

windows10-2004-x64

1

decrypted.xlsx

windows7-x64

8

decrypted.xlsx

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9ad9506bcccfaa987ff9fc11b91698d.zip

  • Size

    2.1MB

  • Sample

    220909-ys5qxacgdj

  • MD5

    6fdf4a6ddd6f564589dd060bdc4da2c3

  • SHA1

    68b34a47861c76b9544addcc2f8217ef249f4773

  • SHA256

    5c34c14865f4a98f6cc623710e445f479175aeafafcb55614b139fb61cff9de7

  • SHA512

    64b15cc7f71f3c8a1ed4926549367b11f19147b243a6ad037db49fcadc47e47d988c6af68c2e063c901adf2ad09e72849a65df90d571eae73465413c1c31932e

  • SSDEEP

    49152:K1Sbs3khfrYYv4IVKmJ5ucb8K/U0gmY9XzPJeR2tgUbUuBwdip3HvD3DF/:YSbRfr2IVKmJ5ucfLMTJvgU4ldip3fx

Score
8/10

Malware Config

Targets

    • Target

      44e65a641fb970031c5efed324676b5018803e0a768608d3e186152102615795.xlsx

    • Size

      2.1MB

    • MD5

      c9ad9506bcccfaa987ff9fc11b91698d

    • SHA1

      e788183a2a021f74a21f609e514bb63c4ef2fe49

    • SHA256

      44e65a641fb970031c5efed324676b5018803e0a768608d3e186152102615795

    • SHA512

      509c7c387810399b4a35371b1ae77733184299ee631f13b70e1582a9bed32c8eebaea79beb8ce7bf07ac8d3fcd7d09fd460a461266e073d6d2e6acc5e3bc68b2

    • SSDEEP

      49152:hEK5fuBxYw1iHM+eP4yFIIFd52Mp21N5xb/CVBqCwj7IjLQc1U4l:SK5f6xYSl+VMy8G5ZC6CCIQc1/l

    Score
    8/10

    • Blocklisted process makes network request

    behavioral1behavioral2

    • Target

      decrypted

    • Size

      2.1MB

    • MD5

      711fe9b027c5f6e0cfd51694b69da120

    • SHA1

      b32c2e1b63aaba1103d2f9b38dfa39c6b9cc2780

    • SHA256

      4e05084fe9a60bba11a1b0941b4264d8dbebc30be1630a06f05f86c4466b1510

    • SHA512

      33405b40dbbae9294c3df14a22545e0ae8a9acc26cac69ea6d6e6c00138105e1fc4523352169187a1fa969a7b455eadcc35d52bb1048d365b3007722607d06ed

    • SSDEEP

      49152:xaphEoOdnowYVpoDzFNnyKfENk1HA3p5PGeRgcT1Md3Qvpmd:Av2lapmffIka3pZlTWOpmd

    Score
    8/10

    • Blocklisted process makes network request

    behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Exploitation for Client Execution

2
T1203

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

4
T1012

System Information Discovery

4
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks