Overview

overview

10

Static

static

8

f835a18874...f7.xls

windows7-x64

10

f835a18874...f7.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f835a188741f471b7b42c2b671da86086d3fc323427157f7fcc03975aaf611f7

  • Size

    97KB

  • Sample

    221118-23lmkaga9s

  • MD5

    43b6ebc7546d6d278c9da08a2bb7f440

  • SHA1

    d4235774f3c242994d5e78d47855bba577ecad09

  • SHA256

    f835a188741f471b7b42c2b671da86086d3fc323427157f7fcc03975aaf611f7

  • SHA512

    33349b08fb874bcb937f3679d01d3570707ea09929c99cbe98bb4e012f2f073b96cea7abcfd9563c8d84c27d00d6a39844508a7d1e61f97072bc94898407dc42

  • SSDEEP

    1536:fqqqqefLaxRfWVbrzQ7Z1lTkR623LM88qcJtXwFh2Kvxa:rWVbrzQ7tTk9YjpJtXweyM

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      f835a188741f471b7b42c2b671da86086d3fc323427157f7fcc03975aaf611f7

    • Size

      97KB

    • MD5

      43b6ebc7546d6d278c9da08a2bb7f440

    • SHA1

      d4235774f3c242994d5e78d47855bba577ecad09

    • SHA256

      f835a188741f471b7b42c2b671da86086d3fc323427157f7fcc03975aaf611f7

    • SHA512

      33349b08fb874bcb937f3679d01d3570707ea09929c99cbe98bb4e012f2f073b96cea7abcfd9563c8d84c27d00d6a39844508a7d1e61f97072bc94898407dc42

    • SSDEEP

      1536:fqqqqefLaxRfWVbrzQ7Z1lTkR623LM88qcJtXwFh2Kvxa:rWVbrzQ7tTk9YjpJtXweyM

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks