Overview

overview

10

Static

static

10

667b669aa8...0.docx

windows7-x64

7

667b669aa8...0.docx

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    667b669aa8550120f1e4281ec1d94b50

  • Size

    10KB

  • Sample

    240119-baytbabhfj

  • MD5

    667b669aa8550120f1e4281ec1d94b50

  • SHA1

    4973d9e75316e3873d3b8203daf59e84e21cb4e0

  • SHA256

    7402820a9e624e3c35ce2275dd9e6d73e906d976c8e4da6a140ca7cb7daab2cc

  • SHA512

    d0c4b1846501b2f55a692a1865e8c9afee3607ec9b29173132b050953c4e406c0476a08177cda61712fa713490afb11f8f13b38a794724fea1dcaaa3d86cc782

  • SSDEEP

    192:ScIMmtPZG/bEpOcOsWgEamWBXpK0ydJb3F0tx:SPXEEpOtNoEP7by

Score
10/10
websettings

Malware Config

Extracted

Rule
Microsoft Office WebSettings Relationship
C2

http://198.12.91.187/..........-.-.-...................................-----------/...........................-...................................w.wiz

Targets

    • Target

      667b669aa8550120f1e4281ec1d94b50

    • Size

      10KB

    • MD5

      667b669aa8550120f1e4281ec1d94b50

    • SHA1

      4973d9e75316e3873d3b8203daf59e84e21cb4e0

    • SHA256

      7402820a9e624e3c35ce2275dd9e6d73e906d976c8e4da6a140ca7cb7daab2cc

    • SHA512

      d0c4b1846501b2f55a692a1865e8c9afee3607ec9b29173132b050953c4e406c0476a08177cda61712fa713490afb11f8f13b38a794724fea1dcaaa3d86cc782

    • SSDEEP

      192:ScIMmtPZG/bEpOcOsWgEamWBXpK0ydJb3F0tx:SPXEEpOtNoEP7by

    Score
    7/10

    • Abuses OpenXML format to download file from external location

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks