Resubmissions

31-05-2023 23:12

230531-264ybabe52 10

31-05-2023 22:57

230531-2xdprsbh4w 10

31-05-2023 22:33

230531-2gj7lsbg9s 10

General

  • Target

    doc_F459_May_31.js

  • Size

    5KB

  • Sample

    230531-264ybabe52

  • MD5

    bce6420860297bb22377605e2ffd1409

  • SHA1

    a0f8bac6d1ca9209ea427e1442605b03c8d9bf13

  • SHA256

    d4822608fc6ed9f26a80bc5964d30b47545a847138bee840515004c9a1324e5e

  • SHA512

    3d4ca5d2be40eda46d8a60a8a5a6bc84e1dbcbdc1881bbac438ad6c7544fbddb118359e684b261cb77edd4f5683353a459bb91a171074558c62cbd7ca8d575c1

  • SSDEEP

    48:QU38PPifBow2/F/vP2/bd7zmfyEmfqCmfCj/9foSoIc7o5OpUoBxFcJPBKnmlSux:B2dGXSYOb/KSqCFm9/u9C

Score
10/10

Malware Config

Targets

    • Target

      doc_F459_May_31.js

    • Size

      5KB

    • MD5

      bce6420860297bb22377605e2ffd1409

    • SHA1

      a0f8bac6d1ca9209ea427e1442605b03c8d9bf13

    • SHA256

      d4822608fc6ed9f26a80bc5964d30b47545a847138bee840515004c9a1324e5e

    • SHA512

      3d4ca5d2be40eda46d8a60a8a5a6bc84e1dbcbdc1881bbac438ad6c7544fbddb118359e684b261cb77edd4f5683353a459bb91a171074558c62cbd7ca8d575c1

    • SSDEEP

      48:QU38PPifBow2/F/vP2/bd7zmfyEmfqCmfCj/9foSoIc7o5OpUoBxFcJPBKnmlSux:B2dGXSYOb/KSqCFm9/u9C

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

MITRE ATT&CK Matrix

Tasks