Overview

overview

10

Static

static

8

d867040c77...31.xls

windows7-x64

10

d867040c77...31.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d867040c772982ad705e87854d67c53b1b9b4570c613566365b75c0a90bda031

  • Size

    195KB

  • Sample

    221118-23nf6aga9v

  • MD5

    2f154be2a940796a9550725d288b531c

  • SHA1

    02532ac56e677901776652f64f7ea80b31a2ecac

  • SHA256

    d867040c772982ad705e87854d67c53b1b9b4570c613566365b75c0a90bda031

  • SHA512

    ebbd04f016079744fc5191563f53d7f55e9dd580e584dcc1861f6494e57b79ccbb70a1bb376d3661613bf813d710f12dafbfb9dcc7be90c54005b32977e937a0

  • SSDEEP

    3072:Gd6AqR+upWVbrzQ7Iu/lSkDERav+i6HSTv:dPmcUS

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      d867040c772982ad705e87854d67c53b1b9b4570c613566365b75c0a90bda031

    • Size

      195KB

    • MD5

      2f154be2a940796a9550725d288b531c

    • SHA1

      02532ac56e677901776652f64f7ea80b31a2ecac

    • SHA256

      d867040c772982ad705e87854d67c53b1b9b4570c613566365b75c0a90bda031

    • SHA512

      ebbd04f016079744fc5191563f53d7f55e9dd580e584dcc1861f6494e57b79ccbb70a1bb376d3661613bf813d710f12dafbfb9dcc7be90c54005b32977e937a0

    • SSDEEP

      3072:Gd6AqR+upWVbrzQ7Iu/lSkDERav+i6HSTv:dPmcUS

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks