Overview

overview

10

Static

static

10

55066756eb...5.docx

windows7-x64

7

55066756eb...5.docx

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9358224920.zip

  • Size

    7KB

  • Sample

    230302-tvtn7sdf89

  • MD5

    2c7a799f1519ab6535a918b8b4015bae

  • SHA1

    e509bc9b0265638b6a2b641f9ce9d89a50dd454a

  • SHA256

    985fc6d92833ecd3a3dc0b8b646c1851be3535feb3b32ab234b5ebaf2260e0bc

  • SHA512

    fc5ea22eb50d972bdc41d4152cf442780dd8c788bb64efa6ed442d78cae067a6ca472ffbdaf3e4e0746be8673ab3f4419581bf8ba8e3f2470d6cda7515062fe9

  • SSDEEP

    192:6B2ENR/2ltegi2dG1EssXjs8W958QTaU9RAfJ4FCgcyq4:MRNR/At9i11ELBW9xDcJ4FC9yD

Score
10/10
websettings

Malware Config

Extracted

Rule
Microsoft Office WebSettings Relationship
C2

http://OIWEROFSDFOOWROOSDFODFOWESODFGDOFGOSDFOIOFSODOXCVVODOO00FOF00F0DF0FFSDF0SDF00SDF0DF0SDF00SDF0S0DF00DF@392060937/ccc........................................doc

Targets

    • Target

      55066756eb5b31eaf5b403b5c8e2578fcc42f030af664ea7aa2bb7d9285e7945

    • Size

      10KB

    • MD5

      2f1d7d1c6a4ac4baab35d66d028fd45c

    • SHA1

      a55ecbd8553b44f1eebe3e414179cc1e0824834e

    • SHA256

      55066756eb5b31eaf5b403b5c8e2578fcc42f030af664ea7aa2bb7d9285e7945

    • SHA512

      910605889f126872b94538c8d4d9beeb1795b78b3ff9f89142789ab76add819f0f14da82e47971206cb2a2eade68cd8d59ee0f489853f80c2eefd928ce95d67d

    • SSDEEP

      192:ScIMmtP1aIG/bslPL++uOmXl+CVWBXJC0c3eu:SPXU/slT+LOsHkZC9d

    Score
    7/10

    • Abuses OpenXML format to download file from external location

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks