Overview

overview

10

Static

static

8

31f13bcedf...6b.xls

windows7-x64

10

31f13bcedf...6b.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31f13bcedfd5e28b3fd679c47223c2d53f7aaf7c377e90d86e267cc1c3c8a66b

  • Size

    96KB

  • Sample

    221201-nb3vwace54

  • MD5

    00142a44ffac759b5d3564e284b13325

  • SHA1

    da2f651e19088d64c4750f5a808e7f0a8e8c5bc2

  • SHA256

    31f13bcedfd5e28b3fd679c47223c2d53f7aaf7c377e90d86e267cc1c3c8a66b

  • SHA512

    20761f2bd11628da72c02b736961104c3ee86ffdf9e52fefc4555583b680ee2a4491693c3376a41cf48b04a8dc3a738ef0629ea5040dd7943a0d9b5bc3874a81

  • SSDEEP

    1536:ZQQQQcSxoPVy4tzw2pWVbrzQ7ITkoYlFA23k088ScJtXwPhfw:wDWVbrzQ7ITkRNjhJtXwJfw

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      31f13bcedfd5e28b3fd679c47223c2d53f7aaf7c377e90d86e267cc1c3c8a66b

    • Size

      96KB

    • MD5

      00142a44ffac759b5d3564e284b13325

    • SHA1

      da2f651e19088d64c4750f5a808e7f0a8e8c5bc2

    • SHA256

      31f13bcedfd5e28b3fd679c47223c2d53f7aaf7c377e90d86e267cc1c3c8a66b

    • SHA512

      20761f2bd11628da72c02b736961104c3ee86ffdf9e52fefc4555583b680ee2a4491693c3376a41cf48b04a8dc3a738ef0629ea5040dd7943a0d9b5bc3874a81

    • SSDEEP

      1536:ZQQQQcSxoPVy4tzw2pWVbrzQ7ITkoYlFA23k088ScJtXwPhfw:wDWVbrzQ7ITkRNjhJtXwJfw

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks