Overview

overview

10

Static

static

8

987087ed70...c1.xls

windows7-x64

10

987087ed70...c1.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    987087ed70a94b22dd40e44c82123622bc188a68aba48c815d0668263c768dc1

  • Size

    109KB

  • Sample

    221119-31rw8sgc26

  • MD5

    233def0bb8aff4bce8982a3a2932507c

  • SHA1

    cd52c702fc5d1a5fadbcfda4bd71846fd903d1ff

  • SHA256

    987087ed70a94b22dd40e44c82123622bc188a68aba48c815d0668263c768dc1

  • SHA512

    e5da1178063bb56e36bd57ae5cf9c525279d0559a6fbc8d67f5369ffcaa49eac32ec8d37031adeb2261b9f852ac73f5117a4572497695c1dc318d9f812254042

  • SSDEEP

    3072:Jyl6Nc7yRzs1H75wkZUgsQ6NqTBun5oKEWVbrlYQ7ITkDULi2JtXw6E5k7j:Ul6Nc7yRzs1H75wkZUgsQ6NqTBun5o8s

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      987087ed70a94b22dd40e44c82123622bc188a68aba48c815d0668263c768dc1

    • Size

      109KB

    • MD5

      233def0bb8aff4bce8982a3a2932507c

    • SHA1

      cd52c702fc5d1a5fadbcfda4bd71846fd903d1ff

    • SHA256

      987087ed70a94b22dd40e44c82123622bc188a68aba48c815d0668263c768dc1

    • SHA512

      e5da1178063bb56e36bd57ae5cf9c525279d0559a6fbc8d67f5369ffcaa49eac32ec8d37031adeb2261b9f852ac73f5117a4572497695c1dc318d9f812254042

    • SSDEEP

      3072:Jyl6Nc7yRzs1H75wkZUgsQ6NqTBun5oKEWVbrlYQ7ITkDULi2JtXw6E5k7j:Ul6Nc7yRzs1H75wkZUgsQ6NqTBun5o8s

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks