Overview

overview

8

Static

static

8

metrofax.doc

windows7-x64

1

metrofax.doc

windows10-2004-x64

6

Resubmissions

21/02/2024, 16:25

240221-txe9laah7s 8

18/02/2024, 17:10

240218-vp4gwsdb23 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    metrofax.doc

  • Size

    221KB

  • Sample

    240221-txe9laah7s

  • MD5

    28e855032f83adbd2d8499af6d2d0e22

  • SHA1

    6b590325e2e465d9762fa5d1877846667268558a

  • SHA256

    b13b29772c29ccb412d6ab360ff38525836fcf0f65be637a7945a83a446dfd5e

  • SHA512

    e401cbd41e044ff7d557f57960d50fb821244eaa97ce1218191d58e0935f6c069e6a0ff4788ed91ead279f36ba4eddfaa08dc3de01082c41dc9c2fc3c4b0ae34

  • SSDEEP

    3072:zVIfFuR6AqFMa2fL3NtkWL90y7K4mlQCww7zDTW6HNRn0nPmaw:zVIf8RsOtZclptz78Pk

Score
8/10
macromacro_on_action

Malware Config

Targets

    • Target

      metrofax.doc

    • Size

      221KB

    • MD5

      28e855032f83adbd2d8499af6d2d0e22

    • SHA1

      6b590325e2e465d9762fa5d1877846667268558a

    • SHA256

      b13b29772c29ccb412d6ab360ff38525836fcf0f65be637a7945a83a446dfd5e

    • SHA512

      e401cbd41e044ff7d557f57960d50fb821244eaa97ce1218191d58e0935f6c069e6a0ff4788ed91ead279f36ba4eddfaa08dc3de01082c41dc9c2fc3c4b0ae34

    • SSDEEP

      3072:zVIfFuR6AqFMa2fL3NtkWL90y7K4mlQCww7zDTW6HNRn0nPmaw:zVIf8RsOtZclptz78Pk

    Score
    6/10

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks