Overview

overview

10

Static

static

8

fe09648a51...a1.xls

windows7-x64

10

fe09648a51...a1.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe09648a515725512006fac26894046454340afe195dced36b632ef4c164e7a1

  • Size

    123KB

  • Sample

    221128-pyg3cshg2t

  • MD5

    b709b870c9c26ab8fdfd61e776c76c61

  • SHA1

    0ec293a3dd3f49c996dfa02e3efcd529dcca62c4

  • SHA256

    fe09648a515725512006fac26894046454340afe195dced36b632ef4c164e7a1

  • SHA512

    3857181a7986db0e440ab3b1875ca6678f17fa869a21aa239f485ac8994319fa026579dd7d33c7023b24e7d16c1bb1cb2d4d0d94148e95b42e3ecc2b8aeab726

  • SSDEEP

    3072:ioz9CZ4mJWRMT67EI7fsCqGXkjTLkimXK8SJwwI2jcc0lbxOrWUJtXwMR:ioz9CZ4mJWRMT67EI7fsCqGXkjTLkim

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      fe09648a515725512006fac26894046454340afe195dced36b632ef4c164e7a1

    • Size

      123KB

    • MD5

      b709b870c9c26ab8fdfd61e776c76c61

    • SHA1

      0ec293a3dd3f49c996dfa02e3efcd529dcca62c4

    • SHA256

      fe09648a515725512006fac26894046454340afe195dced36b632ef4c164e7a1

    • SHA512

      3857181a7986db0e440ab3b1875ca6678f17fa869a21aa239f485ac8994319fa026579dd7d33c7023b24e7d16c1bb1cb2d4d0d94148e95b42e3ecc2b8aeab726

    • SSDEEP

      3072:ioz9CZ4mJWRMT67EI7fsCqGXkjTLkimXK8SJwwI2jcc0lbxOrWUJtXwMR:ioz9CZ4mJWRMT67EI7fsCqGXkjTLkim

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks