c5ffa5f0b23ed896ab2cfebcaa3eb0f6caa98a9508e4e73a5d8c5fb7f127654e | Triage

Sharing

General

Target

c5ffa5f0b23ed896ab2cfebcaa3eb0f6caa98a9508e4e73a5d8c5fb7f127654e
Size

70KB
Sample

241120-x9sl8ssenn
MD5

29506e7935d854fca5e946d2aadf53c6
SHA1

3ebd2451d6b6616bf538d02b1af6a1d14165f2c5
SHA256

c5ffa5f0b23ed896ab2cfebcaa3eb0f6caa98a9508e4e73a5d8c5fb7f127654e
SHA512

3de15e25c816c688dc160a93f6dcfca57f6fe098a1a8c7e9ccb10bdf4c4fa63e3362c7a0732644c5f8c656311a6e1695300407905ea28418ce0d1ba463b08ced
SSDEEP

1536:OhKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+e+hDcnTLiQrRTZws8EgE:uKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMx

Score

10^/10

discovery macro xlm

Malware Config

Targets

- Target
  
  c5ffa5f0b23ed896ab2cfebcaa3eb0f6caa98a9508e4e73a5d8c5fb7f127654e
- Size
  
  70KB
- MD5
  
  29506e7935d854fca5e946d2aadf53c6
- SHA1
  
  3ebd2451d6b6616bf538d02b1af6a1d14165f2c5
- SHA256
  
  c5ffa5f0b23ed896ab2cfebcaa3eb0f6caa98a9508e4e73a5d8c5fb7f127654e
- SHA512
  
  3de15e25c816c688dc160a93f6dcfca57f6fe098a1a8c7e9ccb10bdf4c4fa63e3362c7a0732644c5f8c656311a6e1695300407905ea28418ce0d1ba463b08ced
- SSDEEP
  
  1536:OhKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+e+hDcnTLiQrRTZws8EgE:uKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMx
Score

10^/10

discovery
- Process spawned unexpected child process
  This typically indicates the parent process was compromised via an exploit or macro.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2