Overview

overview

10

Static

static

8

e7ac13654c...c0.xls

windows7-x64

10

e7ac13654c...c0.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7ac13654c1ff2b641a7d14a6c113f41e2272ac2f835eebfaf43d72d198336c0

  • Size

    80KB

  • Sample

    221119-31gfhabd8s

  • MD5

    5145bb6d7b3f36913a736c9f98f80760

  • SHA1

    dabb8b76a73123cedf8dca86291eaf8347e80230

  • SHA256

    e7ac13654c1ff2b641a7d14a6c113f41e2272ac2f835eebfaf43d72d198336c0

  • SHA512

    bba1ab9f7b79c886a07b7773224dcf60e82ec0de46ecbaefb681726de29a416c318c7edcfd4cd6c53fb98792ac30808fc4ff23455b873431f642caec83a16630

  • SSDEEP

    1536:QOOOO7D36GWou3w8Sekz+iCqgx33iz7ukoXFUiAFdRIirn7N84:V3yz7A1UiAFdXJ

Score
10/10
evasionmacropersistencexlm

Malware Config

Targets

    • Target

      e7ac13654c1ff2b641a7d14a6c113f41e2272ac2f835eebfaf43d72d198336c0

    • Size

      80KB

    • MD5

      5145bb6d7b3f36913a736c9f98f80760

    • SHA1

      dabb8b76a73123cedf8dca86291eaf8347e80230

    • SHA256

      e7ac13654c1ff2b641a7d14a6c113f41e2272ac2f835eebfaf43d72d198336c0

    • SHA512

      bba1ab9f7b79c886a07b7773224dcf60e82ec0de46ecbaefb681726de29a416c318c7edcfd4cd6c53fb98792ac30808fc4ff23455b873431f642caec83a16630

    • SSDEEP

      1536:QOOOO7D36GWou3w8Sekz+iCqgx33iz7ukoXFUiAFdRIirn7N84:V3yz7A1UiAFdXJ

    Score
    10/10
    evasionpersistence

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks