Overview

overview

8

Static

static

1

CS30-POL -...OQ.rtf

windows7-x64

8

CS30-POL -...OQ.rtf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    CS30-POL - Traffic Signs chemical products BOQ.doc

  • Size

    6KB

  • Sample

    230531-jvd9eaea8v

  • MD5

    23cfb8a26a00b24b44825084b2309655

  • SHA1

    9cfa9008ef852961b8ab986f424f1bf043b152c2

  • SHA256

    a78f957f97c635c0c4913f101e3960058696804d6d2856d70259e36cbbd10b07

  • SHA512

    7d329a659dbb52b91e8b75eaa40cd2c59436efd57cc7455f1d191e3dcd98331360d2ed6865993190881bb25f7dab0498ad508c47277de25c0003edb2a2bc6f5c

  • SSDEEP

    96:ClUQKr4IyQRlnbrMmimYUQl+JiyDgqaOfvmGicg1fIzlsm1/QyGrmevk4zw:CKQKZvnbg46+D04vB3vlsmZzQU

Score
8/10

Malware Config

Targets

    • Target

      CS30-POL - Traffic Signs chemical products BOQ.doc

    • Size

      6KB

    • MD5

      23cfb8a26a00b24b44825084b2309655

    • SHA1

      9cfa9008ef852961b8ab986f424f1bf043b152c2

    • SHA256

      a78f957f97c635c0c4913f101e3960058696804d6d2856d70259e36cbbd10b07

    • SHA512

      7d329a659dbb52b91e8b75eaa40cd2c59436efd57cc7455f1d191e3dcd98331360d2ed6865993190881bb25f7dab0498ad508c47277de25c0003edb2a2bc6f5c

    • SSDEEP

      96:ClUQKr4IyQRlnbrMmimYUQl+JiyDgqaOfvmGicg1fIzlsm1/QyGrmevk4zw:CKQKZvnbg46+D04vB3vlsmZzQU

    Score
    8/10

    • Blocklisted process makes network request

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks