Overview

overview

10

Static

static

8

738f579e5d...3d.xls

windows7-x64

10

738f579e5d...3d.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    738f579e5d7883f2d6362372183e21626c19961440434bd8506fe5831ec8343d

  • Size

    360KB

  • Sample

    221130-br42naeh23

  • MD5

    afbd93d5ff4cff0569160f731c4d52cd

  • SHA1

    640ac8a1dbbc60b6c37fd0fdd963a525b45a1c57

  • SHA256

    738f579e5d7883f2d6362372183e21626c19961440434bd8506fe5831ec8343d

  • SHA512

    f6e7de831ea274fb30a591a2e65a1ef4d8080b1b0f7ed5756aadafffcdc4444bbd37d1968dc4689cd6b800968d2822185c88dfcb3066e943af39000032307ad0

  • SSDEEP

    3072:jVWCVFatUtQlAnCpErmtovql4LAnCpErmtovqxsTuVwXyZ0bWdYfahcNX3kwhBei:oaunkQBeJI1i

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      738f579e5d7883f2d6362372183e21626c19961440434bd8506fe5831ec8343d

    • Size

      360KB

    • MD5

      afbd93d5ff4cff0569160f731c4d52cd

    • SHA1

      640ac8a1dbbc60b6c37fd0fdd963a525b45a1c57

    • SHA256

      738f579e5d7883f2d6362372183e21626c19961440434bd8506fe5831ec8343d

    • SHA512

      f6e7de831ea274fb30a591a2e65a1ef4d8080b1b0f7ed5756aadafffcdc4444bbd37d1968dc4689cd6b800968d2822185c88dfcb3066e943af39000032307ad0

    • SSDEEP

      3072:jVWCVFatUtQlAnCpErmtovql4LAnCpErmtovqxsTuVwXyZ0bWdYfahcNX3kwhBei:oaunkQBeJI1i

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks