Overview

overview

10

Static

static

8

bbee27ab4c...6b.xls

windows7-x64

10

bbee27ab4c...6b.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bbee27ab4ce0735bb28f7e9a531c09622f16a079071af083dcb1358a8deae06b

  • Size

    138KB

  • Sample

    221119-31qn6sbd81

  • MD5

    09c6f0a621081669c22e2ae23b56db20

  • SHA1

    839329e95b45d561b35b264d1c126cfd27ddabf2

  • SHA256

    bbee27ab4ce0735bb28f7e9a531c09622f16a079071af083dcb1358a8deae06b

  • SHA512

    717cabb27e0ac12920075c6f5f625a546fe6f59f7911806d81b7dd7114ca432c5858306947fa80e31eea6378a5716fbcaac47372fb793be729566a5e23de4456

  • SSDEEP

    3072:4w9l6Nc7yRzs1H75wkZUgsPI4ukoRWGNh8EFbiB0ulWVbrzXv7ITkDngRaiv431:x9l6Nc7yRzs1H75wkZUgsPI4ukoRWGNS

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      bbee27ab4ce0735bb28f7e9a531c09622f16a079071af083dcb1358a8deae06b

    • Size

      138KB

    • MD5

      09c6f0a621081669c22e2ae23b56db20

    • SHA1

      839329e95b45d561b35b264d1c126cfd27ddabf2

    • SHA256

      bbee27ab4ce0735bb28f7e9a531c09622f16a079071af083dcb1358a8deae06b

    • SHA512

      717cabb27e0ac12920075c6f5f625a546fe6f59f7911806d81b7dd7114ca432c5858306947fa80e31eea6378a5716fbcaac47372fb793be729566a5e23de4456

    • SSDEEP

      3072:4w9l6Nc7yRzs1H75wkZUgsPI4ukoRWGNh8EFbiB0ulWVbrzXv7ITkDngRaiv431:x9l6Nc7yRzs1H75wkZUgsPI4ukoRWGNS

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks