Overview

overview

10

Static

static

8

15114AEF43...6B.xls

windows7-x64

10

15114AEF43...6B.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15114AEF4358BB9C224CF71B19F0391D07395214818D48C0E5B23898CE860F6B

  • Size

    217KB

  • Sample

    221123-r17f5sda7v

  • MD5

    fdb8633bcfc132f6013509c79a1cbeaf

  • SHA1

    32290bd2c2b64671c91905f3c79c4c54f5349fa5

  • SHA256

    15114aef4358bb9c224cf71b19f0391d07395214818d48c0e5b23898ce860f6b

  • SHA512

    4989754fd8c10269e7efe52f6f8f0ced3dca0e6f2f9ac8d7ff16daf0bacb283e06a8c9bf732bec3267e4286feda81af80298a3e6d7758fe258057d05ce94ff9d

  • SSDEEP

    6144:zKpb8rGYrMPe3q7Q0XV5xtuEsi8/dgQyY+TAQXTHGUMEyP5p6f5jQml:CbGUMVWlbl

Score
10/10
macroxlm

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

https://designelis.com.br/wp-content/NNfbZZegI/
xlm40.dropper

http://copayucatan.com.mx/wp-includes/BqaJMpC3osZ0LRnKK/
xlm40.dropper

http://cursosweb.com.br/portal/6ozjR/
xlm40.dropper

http://db.rikaz.tech/lCx76IlkrBtEsqNFA7/

Targets

    • Target

      15114AEF4358BB9C224CF71B19F0391D07395214818D48C0E5B23898CE860F6B

    • Size

      217KB

    • MD5

      fdb8633bcfc132f6013509c79a1cbeaf

    • SHA1

      32290bd2c2b64671c91905f3c79c4c54f5349fa5

    • SHA256

      15114aef4358bb9c224cf71b19f0391d07395214818d48c0e5b23898ce860f6b

    • SHA512

      4989754fd8c10269e7efe52f6f8f0ced3dca0e6f2f9ac8d7ff16daf0bacb283e06a8c9bf732bec3267e4286feda81af80298a3e6d7758fe258057d05ce94ff9d

    • SSDEEP

      6144:zKpb8rGYrMPe3q7Q0XV5xtuEsi8/dgQyY+TAQXTHGUMEyP5p6f5jQml:CbGUMVWlbl

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks