Overview

overview

10

Static

static

8

d54550e6b5...dd.xls

windows7-x64

10

d54550e6b5...dd.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d54550e6b5a42ab0845639963135a80c5e34a2039c85b7ba5bbceaf57fb4cbdd

  • Size

    123KB

  • Sample

    221206-rtrgcafb84

  • MD5

    0f7e7355dbbc9baacedfdc43992b39a7

  • SHA1

    cf56eb60b6adf7852ab65ef3e58d7486dbf95ebd

  • SHA256

    d54550e6b5a42ab0845639963135a80c5e34a2039c85b7ba5bbceaf57fb4cbdd

  • SHA512

    f851d9676a49172663cd0d0cff236993d93a9407d8f661a61cbfddfac7902d062933d60ecba2c011bf47903586c797c12832e0dcf6e0add8e524414bdeb3d5c7

  • SSDEEP

    1536:fiiiiIIWi5Df3mGxWi9dkmeXAjcZ95jv6CYH7mWxVAmYIoEaWVbrzQ7ITkR62l/H:7oSjHyWsWVbrzQ7ITk9+jhJtXwB5kZi

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      d54550e6b5a42ab0845639963135a80c5e34a2039c85b7ba5bbceaf57fb4cbdd

    • Size

      123KB

    • MD5

      0f7e7355dbbc9baacedfdc43992b39a7

    • SHA1

      cf56eb60b6adf7852ab65ef3e58d7486dbf95ebd

    • SHA256

      d54550e6b5a42ab0845639963135a80c5e34a2039c85b7ba5bbceaf57fb4cbdd

    • SHA512

      f851d9676a49172663cd0d0cff236993d93a9407d8f661a61cbfddfac7902d062933d60ecba2c011bf47903586c797c12832e0dcf6e0add8e524414bdeb3d5c7

    • SSDEEP

      1536:fiiiiIIWi5Df3mGxWi9dkmeXAjcZ95jv6CYH7mWxVAmYIoEaWVbrzQ7ITkR62l/H:7oSjHyWsWVbrzQ7ITk9+jhJtXwB5kZi

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Hidden Files and Directories

1
T1158

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Hidden Files and Directories

1
T1158

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks