General

  • Target

    C14068B312C53040F23E40ACA6A6251D2330B1EC6874061B50EBB7E6800FDA29

  • Size

    10KB

  • Sample

    230518-cgh7wagd31

  • MD5

    397c47ede0b01a7145478c1c1ebfecad

  • SHA1

    2f8398ddc426bcbaac364e6339b77b8e807c8fa4

  • SHA256

    c14068b312c53040f23e40aca6a6251d2330b1ec6874061b50ebb7e6800fda29

  • SHA512

    7eed78e77302ca07dca6926bf1deb2a0c0630d749811a1fc3d45e19aefb88b0ccb953a3e3782cb43901dc72bda73e8b5e9dd466a2421d5a16c6fb08a51bd94af

  • SSDEEP

    192:ScIMmtPGT7G/bIwXOVORtKz5SEzBC4vNq6sM63SR:SPXuT+xXOVOSdhlqH2

Score
10/10

Malware Config

Extracted

Rule
Microsoft Office WebSettings Relationship
C2

http://%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%22IIOOOWOEOEOEOEOEOEOISISODOEOEOEOODOOOOOOWWOWOQQQOWOWOWOWOIIIDIIFIFIWOEOEOEOIFIDIFODFI@1806682825/e/%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23%23.doc

Targets

    • Target

      C14068B312C53040F23E40ACA6A6251D2330B1EC6874061B50EBB7E6800FDA29

    • Size

      10KB

    • MD5

      397c47ede0b01a7145478c1c1ebfecad

    • SHA1

      2f8398ddc426bcbaac364e6339b77b8e807c8fa4

    • SHA256

      c14068b312c53040f23e40aca6a6251d2330b1ec6874061b50ebb7e6800fda29

    • SHA512

      7eed78e77302ca07dca6926bf1deb2a0c0630d749811a1fc3d45e19aefb88b0ccb953a3e3782cb43901dc72bda73e8b5e9dd466a2421d5a16c6fb08a51bd94af

    • SSDEEP

      192:ScIMmtPGT7G/bIwXOVORtKz5SEzBC4vNq6sM63SR:SPXuT+xXOVOSdhlqH2

    Score
    7/10
    • Abuses OpenXML format to download file from external location

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Tasks