Overview

overview

10

Static

static

8

867b62be69...05.xls

windows7-x64

10

867b62be69...05.xls

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    867b62be69e787abf3c402ab8bea1d05

  • Size

    187KB

  • Sample

    221206-vvhglsge34

  • MD5

    867b62be69e787abf3c402ab8bea1d05

  • SHA1

    f07ea707060b2809dfdef5d8fb29890d6f659438

  • SHA256

    cb481dd2581245f21889987082fb7c5d6c32733f536fc1637ab308c0ca7eb9d6

  • SHA512

    c23cb3cc3e16d30cb7be9025112778231c51a0fafb2ecdbd549310ebf13ff6aaa4d47532665a6c852f1b1e8bf72f0133ca08b610c294a04e57f995b1c95866cc

  • SSDEEP

    3072:wxjyyyim/hrf6OezItyIOglgAQ3pRKEU4mZzo6pRyTWD:Wrm/hractcsN

Score
10/10
macro

Malware Config

Targets

    • Target

      867b62be69e787abf3c402ab8bea1d05

    • Size

      187KB

    • MD5

      867b62be69e787abf3c402ab8bea1d05

    • SHA1

      f07ea707060b2809dfdef5d8fb29890d6f659438

    • SHA256

      cb481dd2581245f21889987082fb7c5d6c32733f536fc1637ab308c0ca7eb9d6

    • SHA512

      c23cb3cc3e16d30cb7be9025112778231c51a0fafb2ecdbd549310ebf13ff6aaa4d47532665a6c852f1b1e8bf72f0133ca08b610c294a04e57f995b1c95866cc

    • SSDEEP

      3072:wxjyyyim/hrf6OezItyIOglgAQ3pRKEU4mZzo6pRyTWD:Wrm/hractcsN

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks