Overview

overview

10

Static

static

8

a8b07b7fc0...e4.xls

windows7-x64

10

a8b07b7fc0...e4.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a8b07b7fc0a6bfa1a3291ea4be1946242e3a233ef069a3e619ab9cd57afd78e4

  • Size

    86KB

  • Sample

    221123-yzes3abd98

  • MD5

    8ff05b318cd6aa35f9f970642d4188eb

  • SHA1

    935dcd78a3169f418de6e2e80b3b3e9dd1ea50b4

  • SHA256

    a8b07b7fc0a6bfa1a3291ea4be1946242e3a233ef069a3e619ab9cd57afd78e4

  • SHA512

    b2c413b8199a58afa81674ba2b9468a99a8cf8a9057d81b3dfef3db94d454967a88a8e23f7142b57bdce40d063ed71e582d91c5d07157731e6601ca9305da70a

  • SSDEEP

    1536:5MMMgZs0Z2WVbrzQ7ITk6mwKA2Q4sY7nJdMcOu4/WwFYMlI:UWVbrzQ7ITkD5940MI

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      a8b07b7fc0a6bfa1a3291ea4be1946242e3a233ef069a3e619ab9cd57afd78e4

    • Size

      86KB

    • MD5

      8ff05b318cd6aa35f9f970642d4188eb

    • SHA1

      935dcd78a3169f418de6e2e80b3b3e9dd1ea50b4

    • SHA256

      a8b07b7fc0a6bfa1a3291ea4be1946242e3a233ef069a3e619ab9cd57afd78e4

    • SHA512

      b2c413b8199a58afa81674ba2b9468a99a8cf8a9057d81b3dfef3db94d454967a88a8e23f7142b57bdce40d063ed71e582d91c5d07157731e6601ca9305da70a

    • SSDEEP

      1536:5MMMgZs0Z2WVbrzQ7ITk6mwKA2Q4sY7nJdMcOu4/WwFYMlI:UWVbrzQ7ITkD5940MI

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks