Overview

overview

10

Static

static

10

5d0ed9f6b1...c.docm

windows7-x64

7

5d0ed9f6b1...c.docm

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d0ed9f6b1faf0b8145da202375b669cb13c2dc7969713f8544960b11617365c

  • Size

    166KB

  • Sample

    221130-r7k7gsch9w

  • MD5

    4bf241b7497f8c7df0850ffb21b5c2ec

  • SHA1

    2097cbb529c58d4de3f5f715c2bd54db7373d807

  • SHA256

    5d0ed9f6b1faf0b8145da202375b669cb13c2dc7969713f8544960b11617365c

  • SHA512

    e2b9d50d7fc7eead426ebf6e313504f7a6318a6a7f6df08c848366f1f3d32a76886aa0f6c92d7cd02e5dc80f91a90002f5b71a9bfbad5a641a99fe9014ae26b6

  • SSDEEP

    3072:TS1XRJHB2yrlqx1Jxh3Sc7g2QhjsDhroHFNyJkc67dGTZVsaqd:TmXReuGJ3ZsyV8HTOkwZVs1

Score
10/10
websettings

Malware Config

Extracted

Rule
Microsoft Office WebSettings Relationship
C2

http://fast-cargo.com/images/file/vb/doc/23.doc

Targets

    • Target

      5d0ed9f6b1faf0b8145da202375b669cb13c2dc7969713f8544960b11617365c

    • Size

      166KB

    • MD5

      4bf241b7497f8c7df0850ffb21b5c2ec

    • SHA1

      2097cbb529c58d4de3f5f715c2bd54db7373d807

    • SHA256

      5d0ed9f6b1faf0b8145da202375b669cb13c2dc7969713f8544960b11617365c

    • SHA512

      e2b9d50d7fc7eead426ebf6e313504f7a6318a6a7f6df08c848366f1f3d32a76886aa0f6c92d7cd02e5dc80f91a90002f5b71a9bfbad5a641a99fe9014ae26b6

    • SSDEEP

      3072:TS1XRJHB2yrlqx1Jxh3Sc7g2QhjsDhroHFNyJkc67dGTZVsaqd:TmXReuGJ3ZsyV8HTOkwZVs1

    Score
    7/10

    • Abuses OpenXML format to download file from external location

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks