Overview

overview

10

Static

static

8

ff3e5345db...8.xlsm

windows7-x64

10

ff3e5345db...8.xlsm

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    ff3e5345db2896cb4b785bcab88f6bd22d40593a33eb7a1cdec8bb055e3670f8
  • Size 473KB
  • Sample240325-1x5mtaaa99
  • SHA256 ff3e5345db2896cb4b785bcab88f6bd22d40593a33eb7a1cdec8bb055e3670f8
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
macro

Malware Config

Targets

    • Target
      ff3e5345db2896cb4b785bcab88f6bd22d40593a33eb7a1cdec8bb055e3670f8
    • Size 473KB
    • SHA256 ff3e5345db2896cb4b785bcab88f6bd22d40593a33eb7a1cdec8bb055e3670f8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks