Overview

overview

10

Static

static

10

Doc_348563...4.docx

windows7-x64

7

Doc_348563...4.docx

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Doc_3485638568454.docx.doc

  • Size

    10KB

  • Sample

    221202-ml5a1shc62

  • MD5

    ed853603c698996c75d6238818113073

  • SHA1

    5b830320e8d40044cf5367cb82221992ed31f031

  • SHA256

    6fa27836c14e050619b16fb9f99e48d70d4fccb9b41a9662d8c3d79f90632b3b

  • SHA512

    4f09839fff2a4877a4ff6d27d57da83bdcd20d337fc46e8da721a413cc718d72566ca21b24510020e4a3aacf9d24270e14e6783530d990ba6fa6097d53401ed2

  • SSDEEP

    192:ScIMmtP8ar5G/bfIdTOy6namWBX8ex6y3prN:SPXt4ATOy6nosMpZ

Score
10/10
websettings

Malware Config

Extracted

Rule
Microsoft Office WebSettings Relationship
C2

http://weiuisdfiuewuidsifuweiriweuriuweiruiweu@zqpispa.it/document_o_0909000.doc

Targets

    • Target

      Doc_3485638568454.docx.doc

    • Size

      10KB

    • MD5

      ed853603c698996c75d6238818113073

    • SHA1

      5b830320e8d40044cf5367cb82221992ed31f031

    • SHA256

      6fa27836c14e050619b16fb9f99e48d70d4fccb9b41a9662d8c3d79f90632b3b

    • SHA512

      4f09839fff2a4877a4ff6d27d57da83bdcd20d337fc46e8da721a413cc718d72566ca21b24510020e4a3aacf9d24270e14e6783530d990ba6fa6097d53401ed2

    • SSDEEP

      192:ScIMmtP8ar5G/bfIdTOy6namWBX8ex6y3prN:SPXt4ATOy6nosMpZ

    Score
    7/10

    • Abuses OpenXML format to download file from external location

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks