Overview

overview

10

Static

static

8

61c3a214ee...8b.xls

windows7-x64

10

61c3a214ee...8b.xls

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61c3a214ee22dd360005d8f2ca6a471c194ee50ee9c7f95b5e3d42d50b41098b

  • Size

    218KB

  • Sample

    221202-sztpbsef71

  • MD5

    5bd32cc77341e5cf5336b05134e23618

  • SHA1

    dc768ea07aa1f3466e079cd9b48dcd60fae2cc75

  • SHA256

    61c3a214ee22dd360005d8f2ca6a471c194ee50ee9c7f95b5e3d42d50b41098b

  • SHA512

    c5fe2adc5c750980b18b01f1c795d3af996490dd7865756a2939d8838ed8fc7907beb9e5697f932960352f8d45c3b5aea35b7d596b8706d7f28842b97bafbd99

  • SSDEEP

    6144:YSsm6m1gxv7yZmspH7+cclKisRaRiXViz1Uzkw/a2Qp53Z9xoZSw:ZkwodZ9x

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      61c3a214ee22dd360005d8f2ca6a471c194ee50ee9c7f95b5e3d42d50b41098b

    • Size

      218KB

    • MD5

      5bd32cc77341e5cf5336b05134e23618

    • SHA1

      dc768ea07aa1f3466e079cd9b48dcd60fae2cc75

    • SHA256

      61c3a214ee22dd360005d8f2ca6a471c194ee50ee9c7f95b5e3d42d50b41098b

    • SHA512

      c5fe2adc5c750980b18b01f1c795d3af996490dd7865756a2939d8838ed8fc7907beb9e5697f932960352f8d45c3b5aea35b7d596b8706d7f28842b97bafbd99

    • SSDEEP

      6144:YSsm6m1gxv7yZmspH7+cclKisRaRiXViz1Uzkw/a2Qp53Z9xoZSw:ZkwodZ9x

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Hidden Files and Directories

1
T1158

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks