Overview

overview

10

Static

static

10

5fbdc2fd7b...0.docx

windows7-x64

7

5fbdc2fd7b...0.docx

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5fbdc2fd7b9fcf00d75d57db95a45780.bender

  • Size

    10KB

  • Sample

    231115-tkv5aacc33

  • MD5

    5fbdc2fd7b9fcf00d75d57db95a45780

  • SHA1

    b2a03e0b531c008057d2c3f4eeedc2b5f3ccaca4

  • SHA256

    973fd226d53866557260798be5796c3369f9c7c52215d65bf47e404274eac1f3

  • SHA512

    e2d59f0bcbcc7f973de9166d3eb7715cc69951f1f923843c91160c95c9ffea33e79b5747eeff375be6c6bf8c0c38e54a0d1401711c8b3acd1107fb15c8240f99

  • SSDEEP

    192:ScIMmtP1aIG/bslPL++uOzl+CVWBXJC0c3H5:SPXU/slT+LOzHkZC9Z

Score
10/10
websettings

Malware Config

Extracted

Rule
Microsoft Office WebSettings Relationship
C2

http://kkkkkkkkkkkkk34kkkkkkkkkkkkkk34kkkkkkkkkkkkkk34kkkkkkkkkkkkkk34kkkkkkkkkkkk34kkkkkkkkkkkkkk34ksdfhdskfhsdkfh33hkh34h3k@3221484439/31....................31.................doc

Targets

    • Target

      5fbdc2fd7b9fcf00d75d57db95a45780.bender

    • Size

      10KB

    • MD5

      5fbdc2fd7b9fcf00d75d57db95a45780

    • SHA1

      b2a03e0b531c008057d2c3f4eeedc2b5f3ccaca4

    • SHA256

      973fd226d53866557260798be5796c3369f9c7c52215d65bf47e404274eac1f3

    • SHA512

      e2d59f0bcbcc7f973de9166d3eb7715cc69951f1f923843c91160c95c9ffea33e79b5747eeff375be6c6bf8c0c38e54a0d1401711c8b3acd1107fb15c8240f99

    • SSDEEP

      192:ScIMmtP1aIG/bslPL++uOzl+CVWBXJC0c3H5:SPXU/slT+LOzHkZC9Z

    Score
    7/10

    • Abuses OpenXML format to download file from external location

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks