Overview

overview

10

Static

static

3

excel40mac...ge.rar

windows10-1703-x64

10

Resubmissions

29/01/2024, 04:39

240129-e973taabe910

29/01/2024, 02:55

240129-dew7dshgep10

29/01/2024, 01:55

240129-ccg41sfdf210

29/01/2024, 01:50

240129-b9jhnsgham3

29/01/2024, 01:26

240129-bts26sfaa410

Sharing

Copy URL Twitter E-mail

General

  • Target
    excel40macroschallenge.zip
  • Size 103KB
  • Sample240129-e973taabe9
  • SHA256 024ef55d8112d913021e2f8e38294052c40d177062afebc1b462f396c86c297b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Language

  • xlm4.0

Source
URLs
  • xlm40.dropper

    https://nws.visionconsulting.ro/N1G1KCXA/dot.html
  • xlm40.dropper

    https://royalpalm.sparkblue.lk/vCNhYrq3Yg8/dot.html

Targets

    • Target
      excel40macroschallenge.zip
    • Size 103KB
    • SHA256 024ef55d8112d913021e2f8e38294052c40d177062afebc1b462f396c86c297b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks