Overview

overview

10

Static

static

8

b19cdd39be...b3.xls

windows7-x64

10

b19cdd39be...b3.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b19cdd39be99eb69c1382e002b247f097ede6729c57a758079979abc77769cb3

  • Size

    144KB

  • Sample

    221123-ymtfpade5s

  • MD5

    805e3b455a5933a04e810d7fb81c2530

  • SHA1

    3088e8dfd2b0ab80615057f9be99f63d0654b430

  • SHA256

    b19cdd39be99eb69c1382e002b247f097ede6729c57a758079979abc77769cb3

  • SHA512

    f7d5c14d1f524bebeaafd8ffdae6d29fa06cfea722c6db8f078138e92207e70a062a0dda782878777dfee97b6b6dee82e7a28b4b326c71f568c9c6cd6bd2d333

  • SSDEEP

    3072:iWOqqRsWFPf/M6iWVbrzQ7I91kpukZ1YJtXwcD:1On1kG

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      b19cdd39be99eb69c1382e002b247f097ede6729c57a758079979abc77769cb3

    • Size

      144KB

    • MD5

      805e3b455a5933a04e810d7fb81c2530

    • SHA1

      3088e8dfd2b0ab80615057f9be99f63d0654b430

    • SHA256

      b19cdd39be99eb69c1382e002b247f097ede6729c57a758079979abc77769cb3

    • SHA512

      f7d5c14d1f524bebeaafd8ffdae6d29fa06cfea722c6db8f078138e92207e70a062a0dda782878777dfee97b6b6dee82e7a28b4b326c71f568c9c6cd6bd2d333

    • SSDEEP

      3072:iWOqqRsWFPf/M6iWVbrzQ7I91kpukZ1YJtXwcD:1On1kG

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Hidden Files and Directories

1
T1158

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks