Overview

overview

10

Static

static

8

13dd59cf08...98.doc

windows7-x64

10

13dd59cf08...98.doc

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13dd59cf080fa9981fb9a28c390d3bbdaca4e672d656cc2f6993917ecd323d98

  • Size

    128KB

  • Sample

    241122-brlv3s1nbx

  • MD5

    aac6f90d4b8c995ea356da61a64c7e73

  • SHA1

    070252aee72f04f1db312a37a4a750ed9863833f

  • SHA256

    13dd59cf080fa9981fb9a28c390d3bbdaca4e672d656cc2f6993917ecd323d98

  • SHA512

    337ae4e3b73674ef4221bbca003168203a487d58b6a79d81b424bb0938c081678491f86575904e6b723f26d176266c843e8704dc2188e74fba622e15aa133bc6

  • SSDEEP

    1536:l81ooMDS034nC54nZrL4AkiuAMOkEEW/yEbzvadiy03224HEXt1:l8GhDS0o9zTGOZD6EbzCdimu

Score
10/10
discoverymacro

Malware Config

Targets

    • Target

      13dd59cf080fa9981fb9a28c390d3bbdaca4e672d656cc2f6993917ecd323d98

    • Size

      128KB

    • MD5

      aac6f90d4b8c995ea356da61a64c7e73

    • SHA1

      070252aee72f04f1db312a37a4a750ed9863833f

    • SHA256

      13dd59cf080fa9981fb9a28c390d3bbdaca4e672d656cc2f6993917ecd323d98

    • SHA512

      337ae4e3b73674ef4221bbca003168203a487d58b6a79d81b424bb0938c081678491f86575904e6b723f26d176266c843e8704dc2188e74fba622e15aa133bc6

    • SSDEEP

      1536:l81ooMDS034nC54nZrL4AkiuAMOkEEW/yEbzvadiy03224HEXt1:l8GhDS0o9zTGOZD6EbzCdimu

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks