Overview

overview

10

Static

static

8

b4a63503c1...a7.xls

windows7-x64

10

b4a63503c1...a7.xls

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b4a63503c1e6c523c0b1c7b0964e5ea7

  • Size

    111KB

  • Sample

    240305-n6t68aec2x

  • MD5

    b4a63503c1e6c523c0b1c7b0964e5ea7

  • SHA1

    987fa4a5b4cd2ba19c01be721dd1a4a6b1b6b005

  • SHA256

    45d953204ec4bb6c7e9dd32fa4edc5f1b652086e52de4fe34931841b26b446c4

  • SHA512

    bbcc83c3f33e6b18b61272f79d3f360e6d1237ab324f281d587e399c7ffc2d2e03c6f11cc53ce7185e31c8a5dcc04b00069bc79aa932c1ce31eae2f0fa2ccad6

  • SSDEEP

    1536:+44Q0o4gEhmVnLziCdymRxoiKTMc4tUUO6PcsqIyXMkl10XE0cU2jcc0lbxOqTgC:jIl70QU2jcc0lbxOKgEdJtXwAAu

Score
10/10
macroxlm

Malware Config

Targets

    • Target

      b4a63503c1e6c523c0b1c7b0964e5ea7

    • Size

      111KB

    • MD5

      b4a63503c1e6c523c0b1c7b0964e5ea7

    • SHA1

      987fa4a5b4cd2ba19c01be721dd1a4a6b1b6b005

    • SHA256

      45d953204ec4bb6c7e9dd32fa4edc5f1b652086e52de4fe34931841b26b446c4

    • SHA512

      bbcc83c3f33e6b18b61272f79d3f360e6d1237ab324f281d587e399c7ffc2d2e03c6f11cc53ce7185e31c8a5dcc04b00069bc79aa932c1ce31eae2f0fa2ccad6

    • SSDEEP

      1536:+44Q0o4gEhmVnLziCdymRxoiKTMc4tUUO6PcsqIyXMkl10XE0cU2jcc0lbxOqTgC:jIl70QU2jcc0lbxOKgEdJtXwAAu

    Score
    10/10
    macroxlm

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Suspicious Office macro

      Office document equipped with 4.0 macros.

      macroxlm

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks