Overview

overview

10

Static

static

8

7e6fd44bb7...bc.xls

windows7-x64

10

7e6fd44bb7...bc.xls

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7e6fd44bb791b039e56151106afd5a99de35ad9cb476adfdb1d7f00cb422a1bc

  • Size

    91KB

  • Sample

    241120-y2vmassnav

  • MD5

    60f807360b85cdbb3ff6649ed3c5b843

  • SHA1

    f40c0287dc4823f2003882360724972abc82fceb

  • SHA256

    7e6fd44bb791b039e56151106afd5a99de35ad9cb476adfdb1d7f00cb422a1bc

  • SHA512

    8bd29ebeaab2daf358a0843159655f715e303d0f9fcbed092365582b619f1f8732b76309cfeb6ce10d955e9d7485d5b855109f99761dd7ae1cbb101d524b63ee

  • SSDEEP

    1536:eKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgCbCXuZH4gb4CEn9J4ZGL5:eKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgl

Score
10/10
discoverymacroxlm

Malware Config

Extracted

Language
xlm4.0
Source
URLs
xlm40.dropper

http://helpeve.com/wp-admin/sOdeuF1c4DV2h/
xlm40.dropper

http://christplanet.com/wp-admin/maint/mtlsi/TxsAE7TAAb/
xlm40.dropper

http://www.chawkyfrenn.com/icon/LRWYSefRL7/
xlm40.dropper

http://chist.com/dir-/N5zALqqTmf/

Targets

    • Target

      7e6fd44bb791b039e56151106afd5a99de35ad9cb476adfdb1d7f00cb422a1bc

    • Size

      91KB

    • MD5

      60f807360b85cdbb3ff6649ed3c5b843

    • SHA1

      f40c0287dc4823f2003882360724972abc82fceb

    • SHA256

      7e6fd44bb791b039e56151106afd5a99de35ad9cb476adfdb1d7f00cb422a1bc

    • SHA512

      8bd29ebeaab2daf358a0843159655f715e303d0f9fcbed092365582b619f1f8732b76309cfeb6ce10d955e9d7485d5b855109f99761dd7ae1cbb101d524b63ee

    • SSDEEP

      1536:eKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgCbCXuZH4gb4CEn9J4ZGL5:eKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgl

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks