Overview

overview

8

Static

static

inquiry.rtf

windows7-x64

8

inquiry.rtf

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    inquiry.doc

  • Size

    3KB

  • Sample

    221123-qxzrfsab7v

  • MD5

    f2895405298e38600e2b20975265f5ac

  • SHA1

    cad3fabeb6bb0a9aab741f43652d1c0108a48391

  • SHA256

    4ab2e4e7bedf0c9def67194cb6c7593e99ccd99e326c3904f49be5eb0ae04f53

  • SHA512

    a5b6bb01a31fc20c5836ca325b8eedfc6fc3190ddda236b6841d5e90f3ea14891603839e500463e412bcd735c1e1e0b40b2645471f98afedfcabd81962824e62

Score
8/10

Malware Config

Targets

    • Target

      inquiry.doc

    • Size

      3KB

    • MD5

      f2895405298e38600e2b20975265f5ac

    • SHA1

      cad3fabeb6bb0a9aab741f43652d1c0108a48391

    • SHA256

      4ab2e4e7bedf0c9def67194cb6c7593e99ccd99e326c3904f49be5eb0ae04f53

    • SHA512

      a5b6bb01a31fc20c5836ca325b8eedfc6fc3190ddda236b6841d5e90f3ea14891603839e500463e412bcd735c1e1e0b40b2645471f98afedfcabd81962824e62

    Score
    8/10

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Exploitation for Client Execution

1
T1203

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks