Overview

overview

10

Static

static

8

6522ed05b2...db.xls

windows7-x64

10

6522ed05b2...db.xls

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6522ed05b240b752118ba0f1ee579edb

  • Size

    176KB

  • Sample

    240118-ma1tfshdcn

  • MD5

    6522ed05b240b752118ba0f1ee579edb

  • SHA1

    270d576da077bd36d304e4968ef19e9b88b49338

  • SHA256

    39a500d3b4cec6fb391ef8ad2e931c3a81a70045b583bad307049c73db157d99

  • SHA512

    4e8401526688a641c5045a8ce4851c1b40b20a7698aa02e30c37c918aabba8aec08ce32d93209c3442da37eb7137d274e6aa473b7a51e39b15a90b201fd92efb

  • SSDEEP

    1536:leeeSQz8tV8e1sLvczPkJQbzCeqjlxmYqN7uUifKzr+bFOQ1Iuwf9wAKTU+WVbrw:8oXevWVbrzQ7IWk3W3TbKJtXwDrq

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      6522ed05b240b752118ba0f1ee579edb

    • Size

      176KB

    • MD5

      6522ed05b240b752118ba0f1ee579edb

    • SHA1

      270d576da077bd36d304e4968ef19e9b88b49338

    • SHA256

      39a500d3b4cec6fb391ef8ad2e931c3a81a70045b583bad307049c73db157d99

    • SHA512

      4e8401526688a641c5045a8ce4851c1b40b20a7698aa02e30c37c918aabba8aec08ce32d93209c3442da37eb7137d274e6aa473b7a51e39b15a90b201fd92efb

    • SSDEEP

      1536:leeeSQz8tV8e1sLvczPkJQbzCeqjlxmYqN7uUifKzr+bFOQ1Iuwf9wAKTU+WVbrw:8oXevWVbrzQ7IWk3W3TbKJtXwDrq

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks