Overview

overview

10

Static

static

8

551ee6def8...24.xls

windows7-x64

10

551ee6def8...24.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    551ee6def8c4b57add517791d10731c0c0b25234a56434f775e78f8214c7ef24

  • Size

    100KB

  • Sample

    221123-yme83aae65

  • MD5

    b1bb76b5ec2d77543ce336ada9fa5adb

  • SHA1

    6ba9308401d6304f0a7edffaa04bcb1defb40c33

  • SHA256

    551ee6def8c4b57add517791d10731c0c0b25234a56434f775e78f8214c7ef24

  • SHA512

    d0da992c02f93fbd505747b431586860733165131a193d8af023bccebf25dacf8d52853b8c5ecfb9aeaa2380d1e2e4046f4b15f2868fe093a8cf00e741230be7

  • SSDEEP

    1536:c2224URsULqn0kWNtVHj4eZ+SqWrGfZ95fKtZqf3drMtWVcjD+4zQ7ITkR62lGIH:URKNWV2zQ7ITk9d2mJtXwN5kkG

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      551ee6def8c4b57add517791d10731c0c0b25234a56434f775e78f8214c7ef24

    • Size

      100KB

    • MD5

      b1bb76b5ec2d77543ce336ada9fa5adb

    • SHA1

      6ba9308401d6304f0a7edffaa04bcb1defb40c33

    • SHA256

      551ee6def8c4b57add517791d10731c0c0b25234a56434f775e78f8214c7ef24

    • SHA512

      d0da992c02f93fbd505747b431586860733165131a193d8af023bccebf25dacf8d52853b8c5ecfb9aeaa2380d1e2e4046f4b15f2868fe093a8cf00e741230be7

    • SSDEEP

      1536:c2224URsULqn0kWNtVHj4eZ+SqWrGfZ95fKtZqf3drMtWVcjD+4zQ7ITkR62lGIH:URKNWV2zQ7ITk9d2mJtXwN5kkG

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks