Overview

overview

10

Static

static

8

7ae4a6e1b1...f7.xls

windows7-x64

1

7ae4a6e1b1...f7.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7ae4a6e1b1de2f0cfd9728bcc50b7417d5f0373ad98915c5da70ed214ecfb8f7

  • Size

    158KB

  • Sample

    221125-qca8csdc7y

  • MD5

    573e1992409be92b619aac1c0edb3012

  • SHA1

    4da3b39f01f4147b74027788ea2becf4087a0e5f

  • SHA256

    7ae4a6e1b1de2f0cfd9728bcc50b7417d5f0373ad98915c5da70ed214ecfb8f7

  • SHA512

    0d45e4fc2955e55d3e01a3b0979a58d885323e352368dd33b76f43a6c36177894ec444dd78c37928f76bfd24b645cfaf3a908bb2b7fbb0a27546271b2b997bad

  • SSDEEP

    1536:/222y2fQDnM+HQ79N0YeXH9E2qBGMCTpTV6r7ZZu2iVNGK7nfQiZ4wTIyBgUNUh6:oiVNZ79UhgUqLRs1aHFnjGFh6h

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      7ae4a6e1b1de2f0cfd9728bcc50b7417d5f0373ad98915c5da70ed214ecfb8f7

    • Size

      158KB

    • MD5

      573e1992409be92b619aac1c0edb3012

    • SHA1

      4da3b39f01f4147b74027788ea2becf4087a0e5f

    • SHA256

      7ae4a6e1b1de2f0cfd9728bcc50b7417d5f0373ad98915c5da70ed214ecfb8f7

    • SHA512

      0d45e4fc2955e55d3e01a3b0979a58d885323e352368dd33b76f43a6c36177894ec444dd78c37928f76bfd24b645cfaf3a908bb2b7fbb0a27546271b2b997bad

    • SSDEEP

      1536:/222y2fQDnM+HQ79N0YeXH9E2qBGMCTpTV6r7ZZu2iVNGK7nfQiZ4wTIyBgUNUh6:oiVNZ79UhgUqLRs1aHFnjGFh6h

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks