Overview

overview

10

Static

static

8

574ad2b1ad...4e.xls

windows7-x64

10

574ad2b1ad...4e.xls

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    574ad2b1ad4d9410f28634f6a5987fdd83b7a00b9e225195b58f108d90a84f4e

  • Size

    104KB

  • Sample

    221129-s39vqafd2v

  • MD5

    f8389a0706be3f09a28b5da75a5223f9

  • SHA1

    efdc89e3fc0d3fb17d93af4bc37bcb1d27e50d07

  • SHA256

    574ad2b1ad4d9410f28634f6a5987fdd83b7a00b9e225195b58f108d90a84f4e

  • SHA512

    d7c36eca29e56133f9fd6ae3fd0099ff0bf8c93f7b1910a46aa98885da7458e153da850364326536a1e48ffc6c88f2f21973f45aed7197e676ca86d0ab014c6c

  • SSDEEP

    1536:a+fTX8PWVFwfDrzQ7ITkR62lIjcY7nJdFoOGIWWt2XKMJM2M/MBCXD:2WVebrzQ7ITk9wpEap5koz

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      574ad2b1ad4d9410f28634f6a5987fdd83b7a00b9e225195b58f108d90a84f4e

    • Size

      104KB

    • MD5

      f8389a0706be3f09a28b5da75a5223f9

    • SHA1

      efdc89e3fc0d3fb17d93af4bc37bcb1d27e50d07

    • SHA256

      574ad2b1ad4d9410f28634f6a5987fdd83b7a00b9e225195b58f108d90a84f4e

    • SHA512

      d7c36eca29e56133f9fd6ae3fd0099ff0bf8c93f7b1910a46aa98885da7458e153da850364326536a1e48ffc6c88f2f21973f45aed7197e676ca86d0ab014c6c

    • SSDEEP

      1536:a+fTX8PWVFwfDrzQ7ITkR62lIjcY7nJdFoOGIWWt2XKMJM2M/MBCXD:2WVebrzQ7ITk9wpEap5koz

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Hidden Files and Directories

1
T1158

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks