General
- Target SOA.xls
- Size 217KB
- Sample240207-hqcpcaedf5
- SHA256 5e7d8d0aad0039653bf2162e9b3f7bcb6d25eb4e44ac2b21c6642cdd70d5e921
- MD5 02c4d2fa035f664818e7a947738f2030
- SHA1 65428a18c6e198dc31a85c3c6a6442e3075bdd61
- SHA512 3c238f9df59d86328cf2b97a50424746f132d9684e87ff4fe9d5b2f1a6beee7a89d02b2cd6d7669d71ad0bf610b3fd1c7e7f35d8c1ee067d2b4007ea274f3705
- SSDEEP 6144:+5QunJWbZP8VNZ6+HYh5JUlHf0vXG02K:+5pJWR8Vv34PJ0/0cK
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
SOA.xls
Resource
win7-20231215-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
SOA.xls
Resource
win10v2004-20231215-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target SOA.xls
- Size 217KB
- SHA256 5e7d8d0aad0039653bf2162e9b3f7bcb6d25eb4e44ac2b21c6642cdd70d5e921
- MD5 02c4d2fa035f664818e7a947738f2030
- SHA1 65428a18c6e198dc31a85c3c6a6442e3075bdd61
- SHA512 3c238f9df59d86328cf2b97a50424746f132d9684e87ff4fe9d5b2f1a6beee7a89d02b2cd6d7669d71ad0bf610b3fd1c7e7f35d8c1ee067d2b4007ea274f3705
- SSDEEP 6144:+5QunJWbZP8VNZ6+HYh5JUlHf0vXG02K:+5pJWR8Vv34PJ0/0cK
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Abuses OpenXML format to download file from external location
-
Executes dropped EXE
-
Loads dropped DLL