Overview

overview

8

Static

static

1

Home Purch...ls.xls

windows7-x64

8

Home Purch...ls.xls

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Home Purchase Contract and Property Details.xls

  • Size

    245KB

  • Sample

    240523-wvxf7sbe3t

  • MD5

    d9d5c1fa0851c35ace66d98089584cbe

  • SHA1

    9fe664c1645be3bb5bd9b3f1292993f247600155

  • SHA256

    777fe31b0202e8e5cf13a9d1d9dea155bfd6e569392714d1e8f61d20048e70ba

  • SHA512

    21a1ae0f92dc7d63a1a29494358bdcd7bd38fe633bb41e29ab356d10e528ee07bcd19c53f8593ca1bd4b4caf2b1f98b233c080b00d5be07d5660e2154043c1c7

  • SSDEEP

    6144:me4UcLe0JOqPQZR8MDdATCR3tSFHjTHxzF4ani/LaqBC:sUP/qPQZR8MxAm/StjDxzuai+e

Score
8/10

Malware Config

Targets

    • Target

      Home Purchase Contract and Property Details.xls

    • Size

      245KB

    • MD5

      d9d5c1fa0851c35ace66d98089584cbe

    • SHA1

      9fe664c1645be3bb5bd9b3f1292993f247600155

    • SHA256

      777fe31b0202e8e5cf13a9d1d9dea155bfd6e569392714d1e8f61d20048e70ba

    • SHA512

      21a1ae0f92dc7d63a1a29494358bdcd7bd38fe633bb41e29ab356d10e528ee07bcd19c53f8593ca1bd4b4caf2b1f98b233c080b00d5be07d5660e2154043c1c7

    • SSDEEP

      6144:me4UcLe0JOqPQZR8MDdATCR3tSFHjTHxzF4ani/LaqBC:sUP/qPQZR8MxAm/StjDxzuai+e

    Score
    8/10

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Abuses OpenXML format to download file from external location

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks