Overview

overview

10

Static

static

8

c3da5ea274...30.xls

windows7-x64

10

c3da5ea274...30.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3da5ea2747309d0f0ee2045d18b1f1f972e67ee9b36fc5319d3b49f408b8930

  • Size

    103KB

  • Sample

    221130-brastaeg48

  • MD5

    78c07b74c868872d36c4c92e21bc72b3

  • SHA1

    ff45e883d553fd9762eaada0d3f928266fbe124d

  • SHA256

    c3da5ea2747309d0f0ee2045d18b1f1f972e67ee9b36fc5319d3b49f408b8930

  • SHA512

    19508d3b8c05185fa6250742e89795e33a220e06af66097fde7a13b7b6d6a2ba254532301163deb06b3428d530fda2ec56986bdf5835819bd6964fca34c633ae

  • SSDEEP

    1536:6gmmm/k6gieXaOsr8dEKdOL+gWVbrz+OOEI7ITkR62lWk88ScJtXwRxM2M/M6HJ:+PWVbrzNC7ITk9ljhJtXwE5keA

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      c3da5ea2747309d0f0ee2045d18b1f1f972e67ee9b36fc5319d3b49f408b8930

    • Size

      103KB

    • MD5

      78c07b74c868872d36c4c92e21bc72b3

    • SHA1

      ff45e883d553fd9762eaada0d3f928266fbe124d

    • SHA256

      c3da5ea2747309d0f0ee2045d18b1f1f972e67ee9b36fc5319d3b49f408b8930

    • SHA512

      19508d3b8c05185fa6250742e89795e33a220e06af66097fde7a13b7b6d6a2ba254532301163deb06b3428d530fda2ec56986bdf5835819bd6964fca34c633ae

    • SSDEEP

      1536:6gmmm/k6gieXaOsr8dEKdOL+gWVbrz+OOEI7ITkR62lWk88ScJtXwRxM2M/M6HJ:+PWVbrzNC7ITk9ljhJtXwE5keA

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks