Overview

overview

10

Static

static

8

45a447bdd1...86.xls

windows7-x64

10

45a447bdd1...86.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45a447bdd100e6e368acef2e5e2351b6b5aaa1556fcf4db9ac7be966919e0f86

  • Size

    89KB

  • Sample

    221128-s3jnjahg3s

  • MD5

    a6c6064ae2ac898e4daf8905e651d125

  • SHA1

    c727b950e2111f188516b2d977e7a04abd00f2e0

  • SHA256

    45a447bdd100e6e368acef2e5e2351b6b5aaa1556fcf4db9ac7be966919e0f86

  • SHA512

    f61477102abfe0d500bb30ecf4fd98d1b6ba7d35634f962655d0f78f1f9224c16099fc350d2c0974408be726a061b50e96bc4c8d50cf17baf6b8b4f49e940764

  • SSDEEP

    1536:2gggMu1VIxzp/WVbrzQ7ITkFx23S2U9JtXwzPN3F:wxFWVbrzQ7ITkGFKJtXwzlF

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      45a447bdd100e6e368acef2e5e2351b6b5aaa1556fcf4db9ac7be966919e0f86

    • Size

      89KB

    • MD5

      a6c6064ae2ac898e4daf8905e651d125

    • SHA1

      c727b950e2111f188516b2d977e7a04abd00f2e0

    • SHA256

      45a447bdd100e6e368acef2e5e2351b6b5aaa1556fcf4db9ac7be966919e0f86

    • SHA512

      f61477102abfe0d500bb30ecf4fd98d1b6ba7d35634f962655d0f78f1f9224c16099fc350d2c0974408be726a061b50e96bc4c8d50cf17baf6b8b4f49e940764

    • SSDEEP

      1536:2gggMu1VIxzp/WVbrzQ7ITkFx23S2U9JtXwzPN3F:wxFWVbrzQ7ITkGFKJtXwzlF

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks