Overview

overview

10

Static

static

8

3043bb70f1...4a.xls

windows7-x64

10

3043bb70f1...4a.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3043bb70f18f18360277fb326d7cc0550bef83b1c86795423f908400ccabb64a

  • Size

    222KB

  • Sample

    221123-ymqpssde4t

  • MD5

    81e5ecef992fac68b7568d5df6ea45dd

  • SHA1

    bff54da6a6fbfdae79cacc2adf003a035ecdb02d

  • SHA256

    3043bb70f18f18360277fb326d7cc0550bef83b1c86795423f908400ccabb64a

  • SHA512

    39bff570690206b22646b4a72e169a91f9c3f76835505891275e3ade2023215446d2eb4c52f8845d24855898dfb30aebc8dae8d18be967815983fbb1b984e7fd

  • SSDEEP

    3072:+PHAqN7O7/FPMo02oiAJ1S2jcc0lbxOKSEmUaFPAA:+vAqN78Mz2BATU

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      3043bb70f18f18360277fb326d7cc0550bef83b1c86795423f908400ccabb64a

    • Size

      222KB

    • MD5

      81e5ecef992fac68b7568d5df6ea45dd

    • SHA1

      bff54da6a6fbfdae79cacc2adf003a035ecdb02d

    • SHA256

      3043bb70f18f18360277fb326d7cc0550bef83b1c86795423f908400ccabb64a

    • SHA512

      39bff570690206b22646b4a72e169a91f9c3f76835505891275e3ade2023215446d2eb4c52f8845d24855898dfb30aebc8dae8d18be967815983fbb1b984e7fd

    • SSDEEP

      3072:+PHAqN7O7/FPMo02oiAJ1S2jcc0lbxOKSEmUaFPAA:+vAqN78Mz2BATU

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks