Overview

overview

10

Static

static

8

Contract-2...18.xls

windows7-x64

10

Contract-2...18.xls

windows10-1703-x64

10

Contract-2...18.xls

windows10-2004-x64

10

Contract-2...18.xls

windows11-21h2-x64

10

Resubmissions

08/01/2024, 19:57

240108-ypk74agdcl10

03/06/2022, 20:27

220603-y8dmcsddf810

Sharing

Copy URL Twitter E-mail

General

  • Target
    Contract-2022-06-03_1618.xls
  • Size 70KB
  • Sample240108-ypk74agdcl
  • SHA256 a4c9ab25e494f7f6f2411e1ff709665d708cbf03566716384bd077046ff40d5e
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
macroxlm

Malware Config

Extracted

Language

  • xlm4.0

Source
URLs
  • xlm40.dropper

    http://panamel.com/wp-content/FBPHSHN1AdVpn/
  • xlm40.dropper

    https://papillonweb.fr/wp-content/QTdf/
  • xlm40.dropper

    https://www.pioneerimmigration.co.in/icon/Z5z5Vx/

Targets

    • Target
      Contract-2022-06-03_1618.xls
    • Size 70KB
    • SHA256 a4c9ab25e494f7f6f2411e1ff709665d708cbf03566716384bd077046ff40d5e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks