Overview

overview

10

Static

static

8

751672cc39...3b.xls

windows7-x64

10

751672cc39...3b.xls

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    751672cc39b51141c193cbba1d1312fbd417b4eabd78c26ce095c04c497f8b3b

  • Size

    92KB

  • Sample

    221205-rq5jssgh68

  • MD5

    e4b3a9b84d702fa0f1f64a1b060b0eb1

  • SHA1

    04802e34e51ee930bd8d27fb5a4d119dc02ae302

  • SHA256

    751672cc39b51141c193cbba1d1312fbd417b4eabd78c26ce095c04c497f8b3b

  • SHA512

    4de06d66d63a0d4af705e787b916f3c6fedc7507c3a97a4f8afcdff2cb1af46af87eedb631a861610351b058a8321cdf6413de21d34e32c91276fd8eddbafd0a

  • SSDEEP

    1536:o999xPZE7rpDA8yWVbczQ7ITkiRMYA23nM88SKJtXwLuWL:/4WVbczQ7ITkiRl8jrJtXwCWL

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      751672cc39b51141c193cbba1d1312fbd417b4eabd78c26ce095c04c497f8b3b

    • Size

      92KB

    • MD5

      e4b3a9b84d702fa0f1f64a1b060b0eb1

    • SHA1

      04802e34e51ee930bd8d27fb5a4d119dc02ae302

    • SHA256

      751672cc39b51141c193cbba1d1312fbd417b4eabd78c26ce095c04c497f8b3b

    • SHA512

      4de06d66d63a0d4af705e787b916f3c6fedc7507c3a97a4f8afcdff2cb1af46af87eedb631a861610351b058a8321cdf6413de21d34e32c91276fd8eddbafd0a

    • SSDEEP

      1536:o999xPZE7rpDA8yWVbczQ7ITkiRMYA23nM88SKJtXwLuWL:/4WVbczQ7ITkiRl8jrJtXwCWL

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks