Overview

overview

10

Static

static

8

33af20ec79...d9.xls

windows7-x64

10

33af20ec79...d9.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33af20ec79d6136c4c88a6b14c9c020581d01694ed8e107a5483ff4b6cf01dd9

  • Size

    102KB

  • Sample

    221118-23sqwacb28

  • MD5

    537f81adb0e35625a5a04c252eb9e93f

  • SHA1

    99e0a51f9d726d58e314f48d89512f0a7f822c42

  • SHA256

    33af20ec79d6136c4c88a6b14c9c020581d01694ed8e107a5483ff4b6cf01dd9

  • SHA512

    fdf755e3d3989ff12b0c682e22bd96649e52928df3f753d4257720ce9cb5bcc729a9a12859dad57d7bfca7a795ec924d3ecd635eea0662f0a0d122762e2c3130

  • SSDEEP

    1536:ZXXXPB7nNc0NHUdftWlIBydBHDDO0pZ95Iz0EoK3+82jcc0lbxOvTgZaaOeXcJtL:tMN2jcc0lbxOrU/MJtXwY2dq

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      33af20ec79d6136c4c88a6b14c9c020581d01694ed8e107a5483ff4b6cf01dd9

    • Size

      102KB

    • MD5

      537f81adb0e35625a5a04c252eb9e93f

    • SHA1

      99e0a51f9d726d58e314f48d89512f0a7f822c42

    • SHA256

      33af20ec79d6136c4c88a6b14c9c020581d01694ed8e107a5483ff4b6cf01dd9

    • SHA512

      fdf755e3d3989ff12b0c682e22bd96649e52928df3f753d4257720ce9cb5bcc729a9a12859dad57d7bfca7a795ec924d3ecd635eea0662f0a0d122762e2c3130

    • SSDEEP

      1536:ZXXXPB7nNc0NHUdftWlIBydBHDDO0pZ95Iz0EoK3+82jcc0lbxOvTgZaaOeXcJtL:tMN2jcc0lbxOrU/MJtXwY2dq

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks