Overview

overview

8

Static

static

8

eecc250e39...1e.xls

windows7-x64

1

eecc250e39...1e.xls

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eecc250e3959ffaa3572218c0490ceb5c5597f11d4f6a225e13574ebdb3db71e.xlsx

  • Size

    4.8MB

  • Sample

    230130-c5cd8sfd9t

  • MD5

    90cede352673de54b372ca7bcd138ffc

  • SHA1

    3ad05e2b6b5044d556aada87e3bfe93d2ea21f2c

  • SHA256

    eecc250e3959ffaa3572218c0490ceb5c5597f11d4f6a225e13574ebdb3db71e

  • SHA512

    30f585d3d138abfb2ee7c19079f25b19e3245a016e6d04038603f633823bccc338711c8d19bd12f8e897252acd5b8d4222f301ba711e865b79d0dc639f281ded

  • SSDEEP

    98304:Ov4K91f7vFpQ+g8RFpiLd+8kLD84tCEr0RtNiC5eSsNMt+r+WC1HnKHnn3BBXXXs:OvpvFa+g8RWLdPk/84tCEr0RtNiC5eS9

Score
8/10
macromacro_on_action

Malware Config

Targets

    • Target

      eecc250e3959ffaa3572218c0490ceb5c5597f11d4f6a225e13574ebdb3db71e.xlsx

    • Size

      4.8MB

    • MD5

      90cede352673de54b372ca7bcd138ffc

    • SHA1

      3ad05e2b6b5044d556aada87e3bfe93d2ea21f2c

    • SHA256

      eecc250e3959ffaa3572218c0490ceb5c5597f11d4f6a225e13574ebdb3db71e

    • SHA512

      30f585d3d138abfb2ee7c19079f25b19e3245a016e6d04038603f633823bccc338711c8d19bd12f8e897252acd5b8d4222f301ba711e865b79d0dc639f281ded

    • SSDEEP

      98304:Ov4K91f7vFpQ+g8RFpiLd+8kLD84tCEr0RtNiC5eSsNMt+r+WC1HnKHnn3BBXXXs:OvpvFa+g8RWLdPk/84tCEr0RtNiC5eS9

    Score
    6/10

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks