Overview

overview

10

Static

static

8

d694404ca7...7.docm

windows7-x64

10

d694404ca7...7.docm

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d694404ca7e02538664e7022b7ee19961e1e224da146e3d408d6cbb6ef3598d7

  • Size

    49KB

  • Sample

    221126-z795lsab5s

  • MD5

    3e0d3d76c894b20af52f4c5c16b142b6

  • SHA1

    29946714e02b1e634deb64f31472c446273897dd

  • SHA256

    d694404ca7e02538664e7022b7ee19961e1e224da146e3d408d6cbb6ef3598d7

  • SHA512

    e0ac53875249059f970e78257d4a93ef13722165c54f5137ad45c8a001ae513fc20608e94e9c9e04dbefafab8d0e87d4096885e0cb3ea5590f95025aa5773bfc

  • SSDEEP

    768:/TEv6fXaPuXKMykYCy/3k/Hcc9cLh/RKsxkCTCuSAi0U/1anfxQrHxHdw:bS6fqPu61/3+Hcc0Ks6CLSAcAfx0tdw

Score
10/10
macro

Malware Config

Targets

    • Target

      d694404ca7e02538664e7022b7ee19961e1e224da146e3d408d6cbb6ef3598d7

    • Size

      49KB

    • MD5

      3e0d3d76c894b20af52f4c5c16b142b6

    • SHA1

      29946714e02b1e634deb64f31472c446273897dd

    • SHA256

      d694404ca7e02538664e7022b7ee19961e1e224da146e3d408d6cbb6ef3598d7

    • SHA512

      e0ac53875249059f970e78257d4a93ef13722165c54f5137ad45c8a001ae513fc20608e94e9c9e04dbefafab8d0e87d4096885e0cb3ea5590f95025aa5773bfc

    • SSDEEP

      768:/TEv6fXaPuXKMykYCy/3k/Hcc9cLh/RKsxkCTCuSAi0U/1anfxQrHxHdw:bS6fqPu61/3+Hcc0Ks6CLSAcAfx0tdw

    Score
    10/10
    macro

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Suspicious Office macro

      Office document equipped with macros.

      macro

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks