Overview

overview

10

Static

static

10

PO_03012023.docx

windows7-x64

7

PO_03012023.docx

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PO_03012023.docx

  • Size

    10KB

  • Sample

    230303-pd9xmsgh5y

  • MD5

    2f1d7d1c6a4ac4baab35d66d028fd45c

  • SHA1

    a55ecbd8553b44f1eebe3e414179cc1e0824834e

  • SHA256

    55066756eb5b31eaf5b403b5c8e2578fcc42f030af664ea7aa2bb7d9285e7945

  • SHA512

    910605889f126872b94538c8d4d9beeb1795b78b3ff9f89142789ab76add819f0f14da82e47971206cb2a2eade68cd8d59ee0f489853f80c2eefd928ce95d67d

  • SSDEEP

    192:ScIMmtP1aIG/bslPL++uOmXl+CVWBXJC0c3eu:SPXU/slT+LOsHkZC9d

Score
10/10
websettings

Malware Config

Extracted

Rule
Microsoft Office WebSettings Relationship
C2

http://OIWEROFSDFOOWROOSDFODFOWESODFGDOFGOSDFOIOFSODOXCVVODOO00FOF00F0DF0FFSDF0SDF00SDF0DF0SDF00SDF0S0DF00DF@392060937/ccc........................................doc

Targets

    • Target

      PO_03012023.docx

    • Size

      10KB

    • MD5

      2f1d7d1c6a4ac4baab35d66d028fd45c

    • SHA1

      a55ecbd8553b44f1eebe3e414179cc1e0824834e

    • SHA256

      55066756eb5b31eaf5b403b5c8e2578fcc42f030af664ea7aa2bb7d9285e7945

    • SHA512

      910605889f126872b94538c8d4d9beeb1795b78b3ff9f89142789ab76add819f0f14da82e47971206cb2a2eade68cd8d59ee0f489853f80c2eefd928ce95d67d

    • SSDEEP

      192:ScIMmtP1aIG/bslPL++uOmXl+CVWBXJC0c3eu:SPXU/slT+LOsHkZC9d

    Score
    7/10

    • Abuses OpenXML format to download file from external location

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks