Overview

overview

10

Static

static

8

3f1ab565f0...e5.xls

windows7-x64

10

3f1ab565f0...e5.xls

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3f1ab565f04bab838bf4109f50402e2abad23433a9ead7e90d7295e3cb4a5be5

  • Size

    103KB

  • Sample

    221030-d8f29sbfdp

  • MD5

    849582b62f9fc6e94bc17fa276219771

  • SHA1

    754f5035f3e581a7c3009520ea4129c394e907ff

  • SHA256

    3f1ab565f04bab838bf4109f50402e2abad23433a9ead7e90d7295e3cb4a5be5

  • SHA512

    815550885c2f1508d28ee80d0b52a3e858a9b791ea49ce85f5b3b000048298180c8b06788c536cd306e7952e38b2b36acb82bbaab059e03c1daea57ea026fae3

  • SSDEEP

    1536:U111bZ34IE8KawWVbuC5749zQ7ITkR62loNfrbWWt2XKsBM2M/Mhwp4I:XWVbuT9zQ7ITk9OjqaN5kCP

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      3f1ab565f04bab838bf4109f50402e2abad23433a9ead7e90d7295e3cb4a5be5

    • Size

      103KB

    • MD5

      849582b62f9fc6e94bc17fa276219771

    • SHA1

      754f5035f3e581a7c3009520ea4129c394e907ff

    • SHA256

      3f1ab565f04bab838bf4109f50402e2abad23433a9ead7e90d7295e3cb4a5be5

    • SHA512

      815550885c2f1508d28ee80d0b52a3e858a9b791ea49ce85f5b3b000048298180c8b06788c536cd306e7952e38b2b36acb82bbaab059e03c1daea57ea026fae3

    • SSDEEP

      1536:U111bZ34IE8KawWVbuC5749zQ7ITkR62loNfrbWWt2XKsBM2M/Mhwp4I:XWVbuT9zQ7ITk9OjqaN5kCP

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks