Overview

overview

10

Static

static

8

4fc39ec587...ea.xls

windows7-x64

10

4fc39ec587...ea.xls

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4fc39ec587a8287ae8229e4d33c2ceaeeda6f3d5d57fa65264119914b06a9eea

  • Size

    93KB

  • Sample

    221128-pafvdsgc5t

  • MD5

    6e28bf7b7810052621722420745e1675

  • SHA1

    edbf8e11708f1145aa5655030d706989df6726db

  • SHA256

    4fc39ec587a8287ae8229e4d33c2ceaeeda6f3d5d57fa65264119914b06a9eea

  • SHA512

    79528b8dd32fb534d38f6e724453adbe8b931a5d2f446de0078ea7da79ec2d74a087b87b73d6fcfb6d85daa51c94c86565f748214f2d35206e160598ba12648e

  • SSDEEP

    1536:WZZZZE5XN2uWVb8H9IzQ7ITkR62lSIhY7nJdJoOd7cJoRrXwRyM2M/MTfU:PnWVbGyzQ7ITk9J2AJcrXwb5kbU

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      4fc39ec587a8287ae8229e4d33c2ceaeeda6f3d5d57fa65264119914b06a9eea

    • Size

      93KB

    • MD5

      6e28bf7b7810052621722420745e1675

    • SHA1

      edbf8e11708f1145aa5655030d706989df6726db

    • SHA256

      4fc39ec587a8287ae8229e4d33c2ceaeeda6f3d5d57fa65264119914b06a9eea

    • SHA512

      79528b8dd32fb534d38f6e724453adbe8b931a5d2f446de0078ea7da79ec2d74a087b87b73d6fcfb6d85daa51c94c86565f748214f2d35206e160598ba12648e

    • SSDEEP

      1536:WZZZZE5XN2uWVb8H9IzQ7ITkR62lSIhY7nJdJoOd7cJoRrXwRyM2M/MTfU:PnWVbGyzQ7ITk9J2AJcrXwb5kbU

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Hidden Files and Directories

1
T1158

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks