Overview

overview

10

Static

static

8

Copy0761000025.xlsm

windows10-1703-x64

10

Copy0761000025.xlsm

windows7-x64

10

Resubmissions

11-06-2024 09:20

240611-la58ha1hnf 10

11-06-2024 09:18

240611-k9pt5a1hke 10

31-05-2024 08:15

240531-j5p4nach79 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Copy0761000025.xlsm

  • Size

    430KB

  • Sample

    240611-k9pt5a1hke

  • MD5

    d01710a02c214a5f6e0197fd291c0b10

  • SHA1

    3b2ed35df644d1684660543c56370dc8686e1a53

  • SHA256

    b18796fe4a4cf8e20e1a54ec3773c819533cb15a545093d1c6e19ce14efaa93d

  • SHA512

    45abdcf42ec483103948e2882bd8187e98ae44af425bdad5f0b1f17b99b336e80acc322c419fdab5cbc8f601993359a0e383c14927a286200c70c1044850e9e5

  • SSDEEP

    12288:7fEXQu7SHOCZhSTIS2dGpeWpqivD1YxR25O8UM:7VwarmMSAGMID1R5OtM

Score
10/10
executionmacro

Malware Config

Targets

    • Target

      Copy0761000025.xlsm

    • Size

      430KB

    • MD5

      d01710a02c214a5f6e0197fd291c0b10

    • SHA1

      3b2ed35df644d1684660543c56370dc8686e1a53

    • SHA256

      b18796fe4a4cf8e20e1a54ec3773c819533cb15a545093d1c6e19ce14efaa93d

    • SHA512

      45abdcf42ec483103948e2882bd8187e98ae44af425bdad5f0b1f17b99b336e80acc322c419fdab5cbc8f601993359a0e383c14927a286200c70c1044850e9e5

    • SSDEEP

      12288:7fEXQu7SHOCZhSTIS2dGpeWpqivD1YxR25O8UM:7VwarmMSAGMID1R5OtM

    Score
    10/10
    execution

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks