Overview

overview

10

Static

static

8

f60f404494...30.xls

windows7-x64

10

f60f404494...30.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f60f404494766df289220f643e5ca730

  • Size

    364KB

  • Sample

    230131-v6d9bshc93

  • MD5

    f60f404494766df289220f643e5ca730

  • SHA1

    386d63dc8623b901e02293e107dc58f280c09823

  • SHA256

    686afc6fb753f15bed690defac787693d35a4afe6c8ac2709d8c53bfad119df8

  • SHA512

    fe0d72f44a233bdea685daeb740285b82861b8e016e8e9b2ec405afb2b27f71f64b723e80eb49bc3a3f9a92065444fd2b3096368ec008ebd7bc8915352fd39b2

  • SSDEEP

    3072:cXBlllllllllllllllllllllllllXO7WXW1+cCUQCiWqAZffIXdHMnIr2FhqDow2:j7WXWkWvfhWYlF73k

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      f60f404494766df289220f643e5ca730

    • Size

      364KB

    • MD5

      f60f404494766df289220f643e5ca730

    • SHA1

      386d63dc8623b901e02293e107dc58f280c09823

    • SHA256

      686afc6fb753f15bed690defac787693d35a4afe6c8ac2709d8c53bfad119df8

    • SHA512

      fe0d72f44a233bdea685daeb740285b82861b8e016e8e9b2ec405afb2b27f71f64b723e80eb49bc3a3f9a92065444fd2b3096368ec008ebd7bc8915352fd39b2

    • SSDEEP

      3072:cXBlllllllllllllllllllllllllXO7WXW1+cCUQCiWqAZffIXdHMnIr2FhqDow2:j7WXWkWvfhWYlF73k

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix

Collection

    Command and Control

      Credential Access

        Defense Evasion

        Discovery

        Execution

          Exfiltration

            Impact

              Initial Access

                Lateral Movement

                  Persistence

                    Privilege Escalation

                      Tasks