Overview

overview

10

Static

static

8

9e067acb41...c8.xls

windows7-x64

10

9e067acb41...c8.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e067acb4161f18c63a8ecd3ed0bc7b37e741fed9a5218ba56d79282ca1457c8

  • Size

    111KB

  • Sample

    221123-yzfelabe22

  • MD5

    8e9283c09fdb17fe9b8a6bf47023032f

  • SHA1

    8f3a2445ada7dec7246e94535a56c728cc308336

  • SHA256

    9e067acb4161f18c63a8ecd3ed0bc7b37e741fed9a5218ba56d79282ca1457c8

  • SHA512

    53e9ae5b9ef86bb34904bd7f609ddeceea2d52e7e483c6f80def5864b4edd912bf47686cd899191fc99429f823d74e545491beb5dce5a2d09dd1719b64fd9408

  • SSDEEP

    1536:5XXXzS0PC3Ob4Qmf8fWVbrzNy7ITkR62S0jSnUC/WwF1Q8M2M/MFeCFNTG:PlmUWVbrzNy7ITk93Gc5k1NTG

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      9e067acb4161f18c63a8ecd3ed0bc7b37e741fed9a5218ba56d79282ca1457c8

    • Size

      111KB

    • MD5

      8e9283c09fdb17fe9b8a6bf47023032f

    • SHA1

      8f3a2445ada7dec7246e94535a56c728cc308336

    • SHA256

      9e067acb4161f18c63a8ecd3ed0bc7b37e741fed9a5218ba56d79282ca1457c8

    • SHA512

      53e9ae5b9ef86bb34904bd7f609ddeceea2d52e7e483c6f80def5864b4edd912bf47686cd899191fc99429f823d74e545491beb5dce5a2d09dd1719b64fd9408

    • SSDEEP

      1536:5XXXzS0PC3Ob4Qmf8fWVbrzNy7ITkR62S0jSnUC/WwF1Q8M2M/MFeCFNTG:PlmUWVbrzNy7ITk93Gc5k1NTG

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks