Overview

overview

10

Static

static

8

3728c8f0d4...8e.xls

windows7-x64

10

3728c8f0d4...8e.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3728c8f0d4a6dd060b8a4e582e85ff6c0f078ef29cefad9776eb92e4a297838e

  • Size

    116KB

  • Sample

    221123-ymr8made4x

  • MD5

    004ca5521ce537c8744ed46133375cbc

  • SHA1

    0fed60173230793eac77360509c97d6461b2ae79

  • SHA256

    3728c8f0d4a6dd060b8a4e582e85ff6c0f078ef29cefad9776eb92e4a297838e

  • SHA512

    6bf1c0096b3db102192a23ec2dd5580b554b1cc6b16e787b2b81a523ac3d0b2a409b057c755d4ca1a9d5182cd37356a4b37b305d806eb10dd0ae827a571752dd

  • SSDEEP

    3072:pr+JAFySeWVbrzQ7I+VjkZB/MJtXwMdM:MJAFyS4Vya5

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      3728c8f0d4a6dd060b8a4e582e85ff6c0f078ef29cefad9776eb92e4a297838e

    • Size

      116KB

    • MD5

      004ca5521ce537c8744ed46133375cbc

    • SHA1

      0fed60173230793eac77360509c97d6461b2ae79

    • SHA256

      3728c8f0d4a6dd060b8a4e582e85ff6c0f078ef29cefad9776eb92e4a297838e

    • SHA512

      6bf1c0096b3db102192a23ec2dd5580b554b1cc6b16e787b2b81a523ac3d0b2a409b057c755d4ca1a9d5182cd37356a4b37b305d806eb10dd0ae827a571752dd

    • SSDEEP

      3072:pr+JAFySeWVbrzQ7I+VjkZB/MJtXwMdM:MJAFyS4Vya5

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks