0967ae832c06d273188411169976c460cfe19696b182cbc5cf5ac33e0ddded12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0967ae832c06d273188411169976c460cfe19696b182cbc5cf5ac33e0ddded12.xlsx
Size

673KB
Sample

221020-zkl49seah5
MD5

ed1844f29d49d91c746231daec6fd461
SHA1

da07a12e12452321d49f90da71774f9b54b11ebd
SHA256

0967ae832c06d273188411169976c460cfe19696b182cbc5cf5ac33e0ddded12
SHA512

6dddba50e54174d427f0efde89151badf0753590880f751a5da1e0642ec6c9bbb44af56ab147ca33cbc3504de3596cdff5acbf68ba80010645919308df176f6a
SSDEEP

12288:/qej5l+JFIITz4N4IjtkC8IwFuoHEPXIBrmm5nWJF+whBGbEz4f4apGdv7+s:l32dIRkCloHEPmo+2oo5apjs

Score

8^/10

Malware Config

Targets

- Target
  
  0967ae832c06d273188411169976c460cfe19696b182cbc5cf5ac33e0ddded12.xlsx
- Size
  
  673KB
- MD5
  
  ed1844f29d49d91c746231daec6fd461
- SHA1
  
  da07a12e12452321d49f90da71774f9b54b11ebd
- SHA256
  
  0967ae832c06d273188411169976c460cfe19696b182cbc5cf5ac33e0ddded12
- SHA512
  
  6dddba50e54174d427f0efde89151badf0753590880f751a5da1e0642ec6c9bbb44af56ab147ca33cbc3504de3596cdff5acbf68ba80010645919308df176f6a
- SSDEEP
  
  12288:/qej5l+JFIITz4N4IjtkC8IwFuoHEPXIBrmm5nWJF+whBGbEz4f4apGdv7+s:l32dIRkCloHEPmo+2oo5apjs
Score

8^/10
- Blocklisted process makes network request
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Exploitation for Client Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2