13b54ea4298feb69555acd6dec7f8f20768411dfa1f9e040a9a90497e5959f92 | Triage

Sharing

General

Target

PO-7100062.xlsx.gz
Size

21KB
Sample

231012-pbaprshd3v
MD5

7034ff90ecc50a7651cf74220ac628c0
SHA1

a49672bf968f6f62940c0d6dd0b8c5c7f7771c03
SHA256

13b54ea4298feb69555acd6dec7f8f20768411dfa1f9e040a9a90497e5959f92
SHA512

e101525712f26fe425b78b6179e03f4e7553385c04d6a94f9da0856ebc3992442988bcd21b5fb5e84da1dd2878efa0bd20d17b419d3a542292d3904cfa9ff815
SSDEEP

384:sVrBohUvCMWL53GrdsPT7XTqL1VuqgCxbFofYYsOTadbDABrivNux/v2W4DLq/w:sVrByUW52rdsbzTqL1VoCBQYFHtWrEN1

Score

7^/10

Malware Config

Targets

- Target
  
  PO-7100062 xlsx.vbs
- Size
  
  40KB
- MD5
  
  352760d0c749c43f655d83aed8197db7
- SHA1
  
  6e88ba7ed23563e930ae52a975a6d3164c114943
- SHA256
  
  87cf48968b5c898324b399e1a241cc90ace231a1ba340387a373b4720198af82
- SHA512
  
  b3a0cc6e7d9c9eabf5c2a56bc45fe991f053297c235f891faa3e312061a45ae7ecd758f887dac850e25e3d2aec1075b8596a0c256c65bb01c1c1842e517880dd
- SSDEEP
  
  768:corMtwTVlHPwlR5EQi/Got7Vg4oOGmXpkzAiPhZeSC0GCG8x:coQqPwN6GoFV+VmZkkiDer7Ox
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2