Overview

overview

10

Static

static

8

a98923840d...7e.xls

windows7-x64

10

a98923840d...7e.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a98923840dd7e2ed8517a6801db2e3f0055fc8989a552ec4c3a481a9b829e37e

  • Size

    211KB

  • Sample

    221124-fwn88abc75

  • MD5

    e63ab2c9512dc3c9b7c9c28491a724df

  • SHA1

    254eb5e98bdd01c3dfba360297bc0c43a9945ca4

  • SHA256

    a98923840dd7e2ed8517a6801db2e3f0055fc8989a552ec4c3a481a9b829e37e

  • SHA512

    5cc54956bf722fc28315752b1b706aa92d50262b6dc94edae5f303fb5c68c25ad482b2c667f1f91946c9fe34973f2b654410648f084aaffa7d63e9475237b56e

  • SSDEEP

    3072:eyhupeBXN0SK+1iBvM81KQigOqbk6Bqly32jcc0lbxOKE/MJtXwMwdF:xUZ7c04gO9avw

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      a98923840dd7e2ed8517a6801db2e3f0055fc8989a552ec4c3a481a9b829e37e

    • Size

      211KB

    • MD5

      e63ab2c9512dc3c9b7c9c28491a724df

    • SHA1

      254eb5e98bdd01c3dfba360297bc0c43a9945ca4

    • SHA256

      a98923840dd7e2ed8517a6801db2e3f0055fc8989a552ec4c3a481a9b829e37e

    • SHA512

      5cc54956bf722fc28315752b1b706aa92d50262b6dc94edae5f303fb5c68c25ad482b2c667f1f91946c9fe34973f2b654410648f084aaffa7d63e9475237b56e

    • SSDEEP

      3072:eyhupeBXN0SK+1iBvM81KQigOqbk6Bqly32jcc0lbxOKE/MJtXwMwdF:xUZ7c04gO9avw

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks