Overview

overview

10

Static

static

1

test_malus.doc

windows7-x64

10

test_malus.doc

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    test_malus.doc

  • Size

    387KB

  • Sample

    230807-hbxqzafc3v

  • MD5

    1d99ba53edeff115bdee3d9f87eb1310

  • SHA1

    ea98ebcfe56807bbce79ce797b8963bf87921ea9

  • SHA256

    dcf95ce87d16d010370ebf3328905f2a45e39a776a7c79ffed103b6d976a27d1

  • SHA512

    9148199181e83077b0891ee297da4aa7cb82596c098bed192f154de57e54640bb6b330e5694035d3702698b81b54d893aa40c5a21eef0511f9c1afb7660a314d

  • SSDEEP

    3072:YBfiq0IFmQZb++tdgIm/JFP9wx+vlqf0UxHfITGU+2wFFCcll3H3rH3XD7Inm+Fj:+fiFrQZb++tdsHP4+QfI6U

Score
10/10

Malware Config

Targets

    • Target

      test_malus.doc

    • Size

      387KB

    • MD5

      1d99ba53edeff115bdee3d9f87eb1310

    • SHA1

      ea98ebcfe56807bbce79ce797b8963bf87921ea9

    • SHA256

      dcf95ce87d16d010370ebf3328905f2a45e39a776a7c79ffed103b6d976a27d1

    • SHA512

      9148199181e83077b0891ee297da4aa7cb82596c098bed192f154de57e54640bb6b330e5694035d3702698b81b54d893aa40c5a21eef0511f9c1afb7660a314d

    • SSDEEP

      3072:YBfiq0IFmQZb++tdgIm/JFP9wx+vlqf0UxHfITGU+2wFFCcll3H3rH3XD7Inm+Fj:+fiFrQZb++tdsHP4+QfI6U

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks