Overview

overview

10

Static

static

4967b9926e...4f.rtf

windows7-x64

6

4967b9926e...4f.rtf

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4967b9926e48dbfcf9e293abdfe546bb4c2eae750831441ad30c3194178fe84f

  • Size

    411KB

  • Sample

    221127-kbkshsga6v

  • MD5

    cdf10c30d465b956a09d8e8cd61b1591

  • SHA1

    381f706596b67efcb0d32f7ba04e9ced8724fe6b

  • SHA256

    4967b9926e48dbfcf9e293abdfe546bb4c2eae750831441ad30c3194178fe84f

  • SHA512

    472cb49a7ebd5e4b1ae06309d3c1002debf7d04b14646f850323b0e7979006a83dff829c8e6f09da49381f665d543912d1402fc88933f25ae18166c3ce5cbebb

  • SSDEEP

    6144:r0fUgaDHXDACjmfcKGdMpFLjHzvoY11IFYSbbmW+7OplFbEQZgSgiF:E1sbbmWftEQZ7gm

Score
10/10

Malware Config

Targets

    • Target

      4967b9926e48dbfcf9e293abdfe546bb4c2eae750831441ad30c3194178fe84f

    • Size

      411KB

    • MD5

      cdf10c30d465b956a09d8e8cd61b1591

    • SHA1

      381f706596b67efcb0d32f7ba04e9ced8724fe6b

    • SHA256

      4967b9926e48dbfcf9e293abdfe546bb4c2eae750831441ad30c3194178fe84f

    • SHA512

      472cb49a7ebd5e4b1ae06309d3c1002debf7d04b14646f850323b0e7979006a83dff829c8e6f09da49381f665d543912d1402fc88933f25ae18166c3ce5cbebb

    • SSDEEP

      6144:r0fUgaDHXDACjmfcKGdMpFLjHzvoY11IFYSbbmW+7OplFbEQZgSgiF:E1sbbmWftEQZ7gm

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks