Overview

overview

10

Static

static

10

OrderXNo-X...1.docx

windows7-x64

7

OrderXNo-X...1.docx

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    OrderXNo-XCW289170-AXXXCW201.docx.doc

  • Size

    10KB

  • Sample

    220928-jbv3tafcf7

  • MD5

    f4c5e11473a31d7fd0151e8e8683f21f

  • SHA1

    a7fa06063b79ed4c06bae700037acc76b25a3910

  • SHA256

    63fe91092f04f3f6aabadb33860c0816ac70ec80a335361096126a2d0246e501

  • SHA512

    5fb8d76c3d0c08ce190e5bfe46c985ae010632be08263956e0c74c71c72e5af5280dc52b467a6b2b179eb6a6e094634004458b256d3d69ed8e5bd0a586487b07

  • SSDEEP

    192:ScIMmtPf+CUG/bA3/w2OHrdlJFmQDZ7rhhap308Z:SPXumAOHjJFmIZfhMFJ

Score
10/10
websettings

Malware Config

Extracted

Rule
Microsoft Office WebSettings Relationship
C2

http://1806450061/...----------------------.................-----------------------......-------/............390.doc

Targets

    • Target

      OrderXNo-XCW289170-AXXXCW201.docx.doc

    • Size

      10KB

    • MD5

      f4c5e11473a31d7fd0151e8e8683f21f

    • SHA1

      a7fa06063b79ed4c06bae700037acc76b25a3910

    • SHA256

      63fe91092f04f3f6aabadb33860c0816ac70ec80a335361096126a2d0246e501

    • SHA512

      5fb8d76c3d0c08ce190e5bfe46c985ae010632be08263956e0c74c71c72e5af5280dc52b467a6b2b179eb6a6e094634004458b256d3d69ed8e5bd0a586487b07

    • SSDEEP

      192:ScIMmtPf+CUG/bA3/w2OHrdlJFmQDZ7rhhap308Z:SPXumAOHjJFmIZfhMFJ

    Score
    7/10

    • Abuses OpenXML format to download file from external location

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks