General

  • Target

    NEW BANK DETAILS.docx

  • Size

    10KB

  • Sample

    230320-lqz2eseg9y

  • MD5

    d081645209709dd28251abd10175d98c

  • SHA1

    360fb08d15811ab3831831510c342861c9c504fd

  • SHA256

    dfa836311bde19e3ff284c975e0633d52ec92e733ade92bea9ab114dda85ac10

  • SHA512

    f15b9f9620c94edf055343ce8c6233368cc11bac8459e4615923f75df03d589045af85b861a346a725878c928e174cd5a2d242910cdca8febae0baf25370cdb7

  • SSDEEP

    192:ScIMmtP1aIG/bslPL++uOz6itl+CVWBXJC0c38m:SPXU/slT+LOFtHkZC9n

Score
10/10

Malware Config

Extracted

Rule
Microsoft Office WebSettings Relationship
C2

http://OASOSIDFOSWEROEROOWRWERWEREWWW0W83W338W83WOIEORIOWEIROWI3339W99ER8WE9R923R29849284WERWERWE9RW93949498WWOEIROWEOR23489W@392117360/ig.........ig........doc

Targets

    • Target

      NEW BANK DETAILS.docx

    • Size

      10KB

    • MD5

      d081645209709dd28251abd10175d98c

    • SHA1

      360fb08d15811ab3831831510c342861c9c504fd

    • SHA256

      dfa836311bde19e3ff284c975e0633d52ec92e733ade92bea9ab114dda85ac10

    • SHA512

      f15b9f9620c94edf055343ce8c6233368cc11bac8459e4615923f75df03d589045af85b861a346a725878c928e174cd5a2d242910cdca8febae0baf25370cdb7

    • SSDEEP

      192:ScIMmtP1aIG/bslPL++uOz6itl+CVWBXJC0c38m:SPXU/slT+LOFtHkZC9n

    Score
    7/10
    • Abuses OpenXML format to download file from external location

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Tasks