Overview

overview

10

Static

static

8

d918e3e78a...10.xls

windows7-x64

10

d918e3e78a...10.xls

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    d918e3e78a25986e395c1c2ac02fe322d3cdb887e6ace4ce0a9a4bfdad695410
  • Size 663KB
  • Sample240925-264ybatakn
  • SHA256 d918e3e78a25986e395c1c2ac02fe322d3cdb887e6ace4ce0a9a4bfdad695410
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
ta505discoverymacromacro_on_actionupx

Malware Config

Extracted

Language

  • xlm4.0

Source

Extracted

Language

  • xlm4.0

Source

Targets

    • Target
      d918e3e78a25986e395c1c2ac02fe322d3cdb887e6ace4ce0a9a4bfdad695410
    • Size 663KB
    • SHA256 d918e3e78a25986e395c1c2ac02fe322d3cdb887e6ace4ce0a9a4bfdad695410
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    ta505discoveryupx

    • TA505

      Cybercrime group active since 2015, responsible for families like Dridex and Locky.

      ta505

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks