107a0ff61bd5f6ddff30df4613cdfce1bd54ea1c6c685610f8aa1cd99eb45c0b

General

Target

Statement of Account.xlam.xlsx
Size

675KB
Sample

230824-m2t5zsde5x
MD5

3cda3c183439f4b26dd8c791a5e6613e
SHA1

4f97e014d8f7869189e725b4faf33acca60e1ed7
SHA256

107a0ff61bd5f6ddff30df4613cdfce1bd54ea1c6c685610f8aa1cd99eb45c0b
SHA512

5bda1cd211f6f008744c2a30594a303a991e842291687877fa3b9f69884b37842b95a22233a3d2696a2ec4aa13ef85c760109575df7143a60e9635deb59ddc9b
SSDEEP

12288:LLZ2SPylVttN6K2nWWrzC8vuh6ZRBBNTfnFV0x7JBFJnzGoT3+:k2WqK3WrzmoRLJ/FW7rFJCF

Score

10^/10

Malware Config

Extracted

Language

ps1

Source

URLs

ps1.dropper

https://uploaddeimagens.com.br/images/004/563/621/original/universo_vbs.jpeg?1690931855

exe.dropper

https://uploaddeimagens.com.br/images/004/563/621/original/universo_vbs.jpeg?1690931855

Targets

- Target
  
  Statement of Account.xlam.xlsx
- Size
  
  675KB
- MD5
  
  3cda3c183439f4b26dd8c791a5e6613e
- SHA1
  
  4f97e014d8f7869189e725b4faf33acca60e1ed7
- SHA256
  
  107a0ff61bd5f6ddff30df4613cdfce1bd54ea1c6c685610f8aa1cd99eb45c0b
- SHA512
  
  5bda1cd211f6f008744c2a30594a303a991e842291687877fa3b9f69884b37842b95a22233a3d2696a2ec4aa13ef85c760109575df7143a60e9635deb59ddc9b
- SSDEEP
  
  12288:LLZ2SPylVttN6K2nWWrzC8vuh6ZRBBNTfnFV0x7JBFJnzGoT3+:k2WqK3WrzmoRLJ/FW7rFJCF
Score

10^/10
- Blocklisted process makes network request
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Exploitation for Client Execution

1

T1203

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Blocklisted process makes network request

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2