Resubmissions

08/05/2024, 09:31

240508-lg8bfadh2v10

08/05/2024, 09:23

240508-lcsp7ade4t10

08/05/2024, 09:17

240508-k9f7zsdc4w10

07/05/2024, 11:17

240507-ndpe9sde211

General

  • Target
    May-Document-6_2024-6683.xlsx
  • Size 51KB
  • Sample240508-lcsp7ade4t
  • SHA256 a3eeef65c42890fd372bc7c627b36d2b9d54a909b809663e0f0392fa34766794
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Targets

    • Target
      May-Document-6_2024-6683.xlsx
    • Size 51KB
    • SHA256 a3eeef65c42890fd372bc7c627b36d2b9d54a909b809663e0f0392fa34766794
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Command and Scripting Interpreter: AutoIT

      Using AutoIT for possible automate script.

MITRE ATT&CK Enterprise v15

Tasks