Overview

overview

10

Static

static

8

348fe1a8c1...03.xls

windows7-x64

10

348fe1a8c1...03.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    348fe1a8c108823f2d59a220b6ebc1f25ec880510eed7b92b7c87019e2c37303

  • Size

    102KB

  • Sample

    221002-zavzesbadk

  • MD5

    72221e92226545ef348dbd98a30d5df0

  • SHA1

    c5535424d95708ccd090602e4a2657a5cbbf2d21

  • SHA256

    348fe1a8c108823f2d59a220b6ebc1f25ec880510eed7b92b7c87019e2c37303

  • SHA512

    f531655581de629f9e9232b749ae4d36ac4df8afeedabee713868c3614d1f9f15e2ba98e62583e619e16f3158d5a6e8d4435fe173f4e2e869f35ce12ce8a0113

  • SSDEEP

    1536:YBBBtZB4F3+/RSWVbrzQ7IdG7kR623wc88ScJtXwoqfWms:hWVbrzQ7Iuk9pjhJtXwHW

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      348fe1a8c108823f2d59a220b6ebc1f25ec880510eed7b92b7c87019e2c37303

    • Size

      102KB

    • MD5

      72221e92226545ef348dbd98a30d5df0

    • SHA1

      c5535424d95708ccd090602e4a2657a5cbbf2d21

    • SHA256

      348fe1a8c108823f2d59a220b6ebc1f25ec880510eed7b92b7c87019e2c37303

    • SHA512

      f531655581de629f9e9232b749ae4d36ac4df8afeedabee713868c3614d1f9f15e2ba98e62583e619e16f3158d5a6e8d4435fe173f4e2e869f35ce12ce8a0113

    • SSDEEP

      1536:YBBBtZB4F3+/RSWVbrzQ7IdG7kR623wc88ScJtXwoqfWms:hWVbrzQ7Iuk9pjhJtXwHW

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks