Overview

overview

8

Static

static

8

�...��.xls

windows7-x64

1

�...��.xls

windows10-2004-x64

1

�...��.xls

windows7-x64

1

�...��.xls

windows10-2004-x64

1

�...�.xlsx

windows7-x64

1

�...�.xlsx

windows10-2004-x64

1

�...ʩ.xls

windows7-x64

1

�...ʩ.xls

windows10-2004-x64

1

�...��.xls

windows7-x64

1

�...��.xls

windows10-2004-x64

1

�...ʩ.xls

windows7-x64

1

�...ʩ.xls

windows10-2004-x64

1

�...��.xls

windows7-x64

1

�...��.xls

windows10-2004-x64

1

�...��.xls

windows7-x64

1

�...��.xls

windows10-2004-x64

1

�...��.xls

windows7-x64

1

�...��.xls

windows10-2004-x64

1

�...��.xls

windows7-x64

1

�...��.xls

windows10-2004-x64

1

�...��.xls

windows7-x64

1

�...��.xls

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cca136ba586ff91e236c2ac2628e99d7356ecd7fbad6647963953a0e972fc7d3

  • Size

    3.6MB

  • Sample

    221125-x8x6bsdc51

  • MD5

    170cfe0bc94fe0230c2e1c25c8f5cbc8

  • SHA1

    5f5b31787037ab066a899517bca8573f1e94f45e

  • SHA256

    cca136ba586ff91e236c2ac2628e99d7356ecd7fbad6647963953a0e972fc7d3

  • SHA512

    194ef32e1f716c94849554dafada3589e3be5b32361f84edd514c996bfbcbd13fdc92bf669c9e8dfd56acdcab23cfc64b595c9a536542603876af856a650cf99

  • SSDEEP

    98304:CcrhaN4PhW1ESv8IgaAp/qBK0mx6Ihm3/3Ag60X8IcR13+iOQ+CdkcD:CSnhkJv8Rvurk4i0X8pfui9d

Score
8/10
macroxlm

Malware Config

Targets

    • Target

      -ƷС-ϸһ/άҪ;·ձ-ƷС.xls

    • Size

      215KB

    • MD5

      b2c03572e8f42d2d0773f12445153fbe

    • SHA1

      65520cd91133f73d3712c0d755090d723c443d0b

    • SHA256

      a4d1ba9bed916b8fdcccd8121fb6e0e2f5008196277b1d0aebf44c6380f49dfd

    • SHA512

      90bca44791f948a48e87eae5a0fbf0c12c3e76ca58ae9d37221a01689da8292576632bdae659729505296541ce3092762704a3efcb5877f87f5995c437151d83

    • SSDEEP

      3072:+Xy0qO/83oaxtE/o5GRpiFM1KnfDkmIBAf+pdMCqxR:+Xyfv4Q5GvgSpK

    Score
    1/10
    behavioral1behavioral2

    • Target

      -ƷС-ϸһ/ƷС-̨˱.xls

    • Size

      143KB

    • MD5

      be986ed9a30c876b8358ce2710c27861

    • SHA1

      e28a11a8281ca30b124f4e8151693a2e646b096d

    • SHA256

      4adb37a0bb8d3bd9c3c7d58478af82c2c6f5cd46260ab6fcd21321e1b8776f5d

    • SHA512

      3057009dbc3ffcc1e1ec69fca39e2fabbaf77ac56c547b225aa9c01b8257d1c2775945e28effc6a22360c11288df5796df75fc9188398fcaae2939ac16131061

    • SSDEEP

      3072:k/2J9pntj47MUr9y1nLhv7jbTv3bJB1YUE6:kgpntcur

    Score
    1/10
    behavioral3behavioral4

    • Target

      -ƷС-ϸһ/ƷС-ݹ滮-.xlsx

    • Size

      16KB

    • MD5

      ab34bad25c1cf5ef5866676ffe73f72e

    • SHA1

      e4621566fc9cf72b4bf6eb75caaf64b79328e108

    • SHA256

      3264e3f31528aeb3a4987bfd35b86494a47569f168c9ed0d528ba4359c3d2982

    • SHA512

      8c495106ac24466f4a2ff42db313cff934c107cc76f260a34ed65575000592a3f8e2c90f29fd2495e2244979126196cd074b3be0ec8f0ba237f8bba13ca49f3e

    • SSDEEP

      384:1oGVAyrbHxyptYYNR+igd9+n85xNv8qcpvY:FA0bHxyHYYNR+igdon85b8XQ

    Score
    1/10
    behavioral5behavioral6

    • Target

      -ƷС-ϸһ/ƷС/·ԴʩƷСޣ..xls

    • Size

      20KB

    • MD5

      29bfb7c85a04bba403deca975ed98319

    • SHA1

      566f003c9a5ec7cd8437a3c912735c25af3e329a

    • SHA256

      31206cd8935c3aaedd0c5635b1128e3943e47bb491ff6918a86f9f4f9fa1a256

    • SHA512

      404187fbdc1d8e367307193258581a39a51586d8cb32764dfab6704a4ffd60246d959874c85aceb9dd6c0d459026f571a76c616705cc05c2e6fe2c456ed12407

    • SSDEEP

      384:vyeeeJQzJ8tV8kvPLzseQbc1qOqrR2g4SPTUoFikTFPQdXyRZa4WwcpyRCtfr35o:aeeeJQzJ8tV8kvPLzseQbc1qOqrR2Y+f

    Score
    1/10
    behavioral7behavioral8

    • Target

      -ƷС-ϸһ/ƷС/ܵϢ½ƷС).xls

    • Size

      13KB

    • MD5

      ba1b2b19aa02b825c3b9f5bdaaf4e464

    • SHA1

      dfa433336c5db26f896542af7a3f0d75b960b21b

    • SHA256

      f3c0dd172fe5ddecfb4dce47c2f481e39360b18990cb12db629602df18db876e

    • SHA512

      27b73a27c9f21d57dea082e3e395d4d878ef7e3c1aadff5279165c95fb0ff0d01429529691fcc06797527914861addd7f0f4fa5d374746f449d572daa8d273f0

    • SSDEEP

      384:FBBBNELtVgxFTkjrMITx8Mx7Rs3us1TxUSoFtm+NLEQtmRfktUBfCuymWQj5+Oa2:FBBBNELtVgxFTkjrMITx8Mx7RsYfmWMJ

    Score
    1/10
    behavioral10behavioral9

    • Target

      -ƷС-ϸһ/ƷС/ܵԴʩ ƷС 1.xls

    • Size

      54KB

    • MD5

      ec1b5dd8d53c875277456fb11a733ee4

    • SHA1

      3a7177d360fb0a2d8bcb041366eeff073f561b89

    • SHA256

      c7bfe50f7991c19116784c807f2c4eb687e54b6161bb7af91980b81b4311c1a7

    • SHA512

      1515cb75c90e524fa4146e3379eb0533d8afc8cfce92a37dc3683c635244a303cca2d5d9b7fea88892ad9bed2bcea2c5a66af74656cb3efdb0560b301d4cbc08

    • SSDEEP

      1536:deeePszQkVbe78SJzLt1cQbWqem/rVJx9FC8W/:Qrw5

    Score
    1/10
    behavioral11behavioral12

    • Target

      -ƷС-ϸһ/ƷС/³ɶϢ ƷС.xls

    • Size

      240KB

    • MD5

      fadcd914f94ff221228ccb76085fc08c

    • SHA1

      1abeb5a46ea1acfc01e4b15ace72d58e9d583554

    • SHA256

      5d815b5ee0b69722aa8b28d5a9513f0bb643ba0fb73ded71688475e537845d72

    • SHA512

      ee6c9fc2f0cd11e54272bff80131ce95c17699c36224009d9ccfa5609368d07debeb05032e09f56829ca68bcf4979d9839db13de4a2da6a445d193888e5e1d5d

    • SSDEEP

      6144:x6iieTZf4ll1vO3bNaGU6vJYhpgF7jxs:x6iiCZgxW3haG5vwW

    Score
    1/10
    behavioral13behavioral14

    • Target

      -ƷС-ϸһ/ƷС/½ͷϢ ƷС.xls

    • Size

      15KB

    • MD5

      b7d02d3b8b039b9916ab2a2311836859

    • SHA1

      923f61a02726f88dd48f2a979d2c3d604b86b7eb

    • SHA256

      2c90b6a72fafb4aab5ce0689806e3a567a69cf8c40ca782c350b5b87e7f25f14

    • SHA512

      441a1804a8ce81ffe5c1e6b3fb8aaae3b952d8b94c61963b23003454b84454d1dd45bf97483f0e4b446107a85055d411aac44b3cd0572750582708b3af9604df

    • SSDEEP

      384:FuuuzJS8c8ee1tV/bsQvPkHqspWkO4q5R2DO0Vhy+/ECh/hqbp4/TNE0KWX4/avn:FuuuzJS8c8ee1tV/bsQvPkHqspWkO4q0

    Score
    1/10
    behavioral15behavioral16

    • Target

      -ƷС-ϸһ/ƷС/ԤϢƷС ).xls

    • Size

      14KB

    • MD5

      1b9bfcfba5325d23ca4639ba84d1e2cd

    • SHA1

      478b092a035659ba65d90a77bfe43c837d823482

    • SHA256

      9199b242b1b6770e2665b3bb10813b42a45d815ae59ecd730a2b6a3eef8f2c4c

    • SHA512

      491270ce86d24344831c96fe63bafe1ee0ed6f032fbf3712aac085cb705bcf8d21e9d3ef633e3e026f0f828ad3ec63ec2628958860fd5b1a4bdde098a1b706c6

    • SSDEEP

      384:ULOOOP88zecQ/JHsSe1tVkbvpWIOCvR2juU1BSefkiBfypsqPoZR6yJNQPoTfZ9M:ULOOOP88zecQ/JHsSe1tVkbvpWIOCvRX

    Score
    1/10
    behavioral17behavioral18

    • Target

      -ƷС-ϸһ/ƷС/Ϣ-ƷС1.xls

    • Size

      77KB

    • MD5

      d6478e655bb4ff4499803ef76f0133b2

    • SHA1

      140ef9cfa6b7087d60bba102b7a79c58e3232db4

    • SHA256

      6ccf01d9219e23f4358da77de7d9a76d44b465fd1ceca5d1bc5c6001fe0a2009

    • SHA512

      bf87c65b432e755ae5614b0dbdad9585a132be84a8a4b559ffb1f8221dab5c090b6109fb6a73d86014026770cb61e7bcaf49c1d7314d8b8c44afeec6ea653255

    • SSDEEP

      1536:deeevzPe8JH/VkMt8SQ1bceqqQkOmOmOkUsCkfr3DR4HKwwv5RC7RJ9Lb:RCDKpqRJ9n

    Score
    1/10
    behavioral19behavioral20

    • Target

      -ƷС-ϸһ/ƷС/˵ȷ ƷС1.xls

    • Size

      260KB

    • MD5

      2e70192f4e98ddae53100ac7ed5a53cd

    • SHA1

      af5f1231fb80a3a1760f4e8205864bf503e89dff

    • SHA256

      07253c7a824363bb30a65ab4619fa3b404b8074c114d17d1e58be419a41399b3

    • SHA512

      7c194492a1eefe2153883430219bce76ad1b070ef71787ac4387eeccf00243a6007df5a2f9759b4b649e1854b336323b0034c59058bb4b879ca0be9c5d246698

    • SSDEEP

      3072:ll9ADDDDDDKn+hQTfHFbXBph7JUoKv3qA8DJL2njNXKq0CrElo2jf:lyhuHFbXBT7JUoKI

    Score
    1/10
    behavioral21behavioral22

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

11
T1112

Credential Access

Discovery

Query Registry

22
T1012

System Information Discovery

22
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks