Overview

overview

10

Static

static

8

a1896a4d45...04.xls

windows7-x64

10

a1896a4d45...04.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1896a4d45191116009148479dd332397c53976cce2eda0e5f75282a6075b904

  • Size

    110KB

  • Sample

    221130-brpxqseg74

  • MD5

    799082d64000a1289c9f154346278d8d

  • SHA1

    91386a1264ed779387bc0f6989b8f0add5623965

  • SHA256

    a1896a4d45191116009148479dd332397c53976cce2eda0e5f75282a6075b904

  • SHA512

    f53865642e152481786022ad22dea07dee6d381d3827af43b421e60da6e6340dbe9bbf99ce1ca078ad8e20f8cd73eeadc5c5c1eb41db04907f4363023a953c9c

  • SSDEEP

    3072:y61gxv7yZmspH7+cclKisEI4ukoRWGNrAzWVbrTQ7ITkPzfoJtXwn6wv4aB:x1gxv7yZmspH7+cclKisEI4ukoRWGNJ8

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      a1896a4d45191116009148479dd332397c53976cce2eda0e5f75282a6075b904

    • Size

      110KB

    • MD5

      799082d64000a1289c9f154346278d8d

    • SHA1

      91386a1264ed779387bc0f6989b8f0add5623965

    • SHA256

      a1896a4d45191116009148479dd332397c53976cce2eda0e5f75282a6075b904

    • SHA512

      f53865642e152481786022ad22dea07dee6d381d3827af43b421e60da6e6340dbe9bbf99ce1ca078ad8e20f8cd73eeadc5c5c1eb41db04907f4363023a953c9c

    • SSDEEP

      3072:y61gxv7yZmspH7+cclKisEI4ukoRWGNrAzWVbrTQ7ITkPzfoJtXwn6wv4aB:x1gxv7yZmspH7+cclKisEI4ukoRWGNJ8

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks