General

  • Target

    DFF468B73DA99E8CF124BEA61B6A154B9D3BF716301DB54B6DF0B7AF30450C7D

  • Size

    10KB

  • Sample

    230208-v2he7acg6t

  • MD5

    7818486ac86d9e339c78c637319bcf0d

  • SHA1

    03c4bbfed5eb789ab69ffe0724c4f5ae8532850f

  • SHA256

    dff468b73da99e8cf124bea61b6a154b9d3bf716301db54b6df0b7af30450c7d

  • SHA512

    e5a0d0679eade2e103e1b85260c883c8bbc313cb382e6eace9876aadfcd365a04a94b7a35c343ace7d5d2dcc5603df3c40b23a7024336301460e4099de61e54c

  • SSDEEP

    192:ScIMmtP8ar5G/bfIdTOtznamWBX8ex6y3+LN:SPXt4ATOtznosM+5

Score
10/10

Malware Config

Extracted

Rule
Microsoft Office WebSettings Relationship
C2

http://000000000000000000000000000000000000000000@3119963302/_--00_o___o00_-oo-___---0-o_o0-__________o0o-__________/jgggjjdfgjdfjghjfdggsahfhfghf.doc

Targets

    • Target

      DFF468B73DA99E8CF124BEA61B6A154B9D3BF716301DB54B6DF0B7AF30450C7D

    • Size

      10KB

    • MD5

      7818486ac86d9e339c78c637319bcf0d

    • SHA1

      03c4bbfed5eb789ab69ffe0724c4f5ae8532850f

    • SHA256

      dff468b73da99e8cf124bea61b6a154b9d3bf716301db54b6df0b7af30450c7d

    • SHA512

      e5a0d0679eade2e103e1b85260c883c8bbc313cb382e6eace9876aadfcd365a04a94b7a35c343ace7d5d2dcc5603df3c40b23a7024336301460e4099de61e54c

    • SSDEEP

      192:ScIMmtP8ar5G/bfIdTOtznamWBX8ex6y3+LN:SPXt4ATOtznosM+5

    Score
    7/10
    • Abuses OpenXML format to download file from external location

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Tasks