Overview

overview

8

Static

static

8

Files/Audi...it.exe

windows11-21h2-x64

3

Files/CVB/...VT.dll

windows11-21h2-x64

3

Files/CVB/CVB.sys

windows11-21h2-x64

1

Files/CVB/CVBAvi.dll

windows11-21h2-x64

3

Files/CVB/CVCAcq.dll

windows11-21h2-x64

3

Files/CVB/...er.dll

windows11-21h2-x64

3

Files/CVB/CVCFile.dll

windows11-21h2-x64

3

Files/CVB/CVCImg.dll

windows11-21h2-x64

3

Files/CVB/...es.dll

windows11-21h2-x64

3

Files/CVB/CVCdisp.dll

windows11-21h2-x64

3

Files/CVB/...ay.dll

windows11-21h2-x64

3

Files/CVB/...er.dll

windows11-21h2-x64

3

Files/CVB/CVimage.dll

windows11-21h2-x64

3

Files/CVB/...sd.dll

windows11-21h2-x64

3

Files/CVB/....1.exe

windows11-21h2-x64

8

Files/CVB/...up.bat

windows11-21h2-x64

8

Files/CVB/pOLE.dll

windows11-21h2-x64

3

Files/Came...ol.dll

windows11-21h2-x64

3

Files/Driv...XR.dll

windows11-21h2-x64

3

Files/Driv...on.dll

windows11-21h2-x64

3

Files/Driv...on.dll

windows11-21h2-x64

3

Files/MSG_DLL.dll

windows11-21h2-x64

3

Files/Resu...V3.xls

windows11-21h2-x64

1

Files/Resu...00.xls

windows11-21h2-x64

1

Files/Resu..._2.xls

windows11-21h2-x64

1

Files/Resu...mo.xls

windows11-21h2-x64

1

Files/Resu...te.xls

windows11-21h2-x64

1

Files/Resu...e.xlsm

windows11-21h2-x64

1

Files/Resu...te.dll

windows11-21h2-x64

3

Files/Resu..._0.xls

windows11-21h2-x64

1

Files/Resu...mo.xls

windows11-21h2-x64

1

Files/Sorcerer.exe

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    Install_Sorcerer_3_0_build3USB.zip

  • Size

    42.1MB

  • Sample

    250520-k18kwaer8s

  • MD5

    e7bec140976492829814ab4a521769bf

  • SHA1

    b1f2aac2fd3445eb54203aa4ea125e758c212817

  • SHA256

    a0419bd79200ca5acf201f347b5d6df6405783fde4d071014a1abbbae376f22d

  • SHA512

    2d1958a454a9ebe9b4d5460a5e32b4c499f630f7795b18c6167f26ffa8841d3d3eb774ff7409deb11e2bcfd4605b4c755fbae4ec83b7c494aa418b9cc8db4918

  • SSDEEP

    786432:eh+koedlNTrM8xDS9Lo0KZZT2CMLtyNCqTzWuu8PSPMgy3AQwBrl:eh+gdllM8xMZKZZpyyNCgSMu

Score
8/10
discoverylinkmacromacro_on_actionpdfpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      Files/AuditData/convert_audit.exe

    • Size

      344KB

    • MD5

      c251366a0a4f58798b7bc9d58a32ad75

    • SHA1

      47213c88c73884f68215af56c31e05c3aced11ce

    • SHA256

      98be51733d260028c904248d3776cbcfd03d01a7bdee00f34ce40b780e12f50a

    • SHA512

      69ee803983c1dd814758f4943df8fde70db0f50d9630026496ded7b5ce21cd791f10cdb03b8cf59bcb4f320c03555f29a2b219bc8c15d9b395cfc7d87d4ffbb2

    • SSDEEP

      6144:A1kESWFa/0o3YgVajtQqLyRYlrxyR1IMoUb+xSOKUXA8T0a+htItlJ0:ukESWAf3YttQRYmR1Im+KUXA8Tp+hO7

    Score
    3/10
    discovery
    behavioral1

    • Target

      Files/CVB/CV1394AVT.dll

    • Size

      40KB

    • MD5

      273afac0c277e21b6e0902cdb19e5a2c

    • SHA1

      400e4829c743bc481c7698d71190d2b409808366

    • SHA256

      3ffe14075fde7c254e57ef1fbe9a3414f96e449a973b713bfe151b7b8c5c0fe6

    • SHA512

      e0b94d0d415c13632506e2e2376401f66225471fc62e691c745bff3cb72938e15e5cedd5a7e014ac516532ddc59a3a40dbbf4edbf62b29ac3e4ea36c3b2806ff

    • SSDEEP

      384:H5ir7cR20Gl6G4SilgzqsSDiHTLJX5iBjOlK1uG:DpG4SilWUATLB5qOl

    Score
    3/10
    discovery
    behavioral2

    • Target

      Files/CVB/CVB.sys

    • Size

      11KB

    • MD5

      e371ac6b75fd560e6eac46094efd475f

    • SHA1

      0024bde4886e94ab8392eb98ac93afea4d26af55

    • SHA256

      4261cb3ffae4a2f164c0ab8dcd999a2f48ba31204248fbd88e909b6b5b09c7d0

    • SHA512

      27ed691afce88b679704c906f6fe1b1a2c14054686ae12f44589575ba4dea76255ac72b8ab14ea518e0a38fb77121a39778fcc1cc7baf4b6cb2b100bcde6464c

    • SSDEEP

      192:VIxEzQsj1slcsN/Xbej+UUyowJL/aMjGwP7FMKGuhv+ebM0M+:Gxs+XbNlYJLWJmBbB

    Score
    1/10
    behavioral3

    • Target

      Files/CVB/CVBAvi.dll

    • Size

      269KB

    • MD5

      be4dddc1486d5e8e175e60b3f6427aab

    • SHA1

      53b539b55ee14cacc267ec663f9cc6a08f6cbbc9

    • SHA256

      34b65ceb82ec102784ecbab7fa529d8e594a3984a62ac243c35584163f2ef9db

    • SHA512

      3107c84e75dacea417fe29616033872dd573549a2156733ec071a8f35f2b9553c5cad5d5e98730a82cf4a585ee93887707551328a2c54b363a7295167e1b2624

    • SSDEEP

      6144:buYBnFMJzxdQFgCTw9P6VzzSdOjtRioNfRHT:bLEj/izrZNFT

    Score
    3/10
    discovery
    behavioral4

    • Target

      Files/CVB/CVCAcq.DLL

    • Size

      20KB

    • MD5

      a2aa6af1dbb07d2e035e6108f88de65d

    • SHA1

      2c8c84fa8fe0953ddb8800881b094d4f5e1c0e06

    • SHA256

      f41c74a3b84004c65b2c87f00859ebceed6c0bcd3b4f33546705006304f70c04

    • SHA512

      a49fd5054f6af04c9d4a5102746709043ffc838059814b20e01dd17287671982c36290537172fa138e3e92b8149c87afcb851404cd33ffec1bbd77a6c17cd0dc

    • SSDEEP

      384:nyyZg7Vz4QxDSaPxDU6kM5Ogr0plr0wYofGrJYJLWJmBbJ0:DeztxGExSqOgilr0wRGrkLbbJ0

    Score
    3/10
    discovery
    behavioral5

    • Target

      Files/CVB/CVCDriver.dll

    • Size

      157KB

    • MD5

      86e46f078d5d2a30ab3ef1fecd514c98

    • SHA1

      1f8e51a42550e7cefa5b9c64a3df7fa77bc8a5da

    • SHA256

      23906a2525212d3fd14bdb72a7ae92dfbe2d8aa77dfc9091755f752de3e5bee2

    • SHA512

      89f861f0bb92de501157f7be3a4ada8f363490ae72690656f508d086c689436c7b5b014beb40127327390358a34f315ea8572edee0974da7ce9ca7083330c69b

    • SSDEEP

      3072:kFX9Dk1YcU4AiVYZUnnD4bVhryCuTJO4aWATNSAqPAJrS:4XkniRCJORgAjxS

    Score
    3/10
    discovery
    behavioral6

    • Target

      Files/CVB/CVCFile.dll

    • Size

      937KB

    • MD5

      11343007d635a7218414c3be0521b8b1

    • SHA1

      9b161955ef6c5204b1f1a637a5e36462568c6370

    • SHA256

      f4bb561eeed6e2778589d5522648ab9fba891ccd4c8f178fc72b3451964fdf01

    • SHA512

      e78be4397ba168ff1b44d883cb0952f41da5f681ab1b9ba16639deaf67e0f9b36eb96b881c83bf502ba4cc7b3e2b107a24696e6167e57d5a4f30c98827a9ad36

    • SSDEEP

      12288:R3moKXUbLVIlrug82e56RLoJtDTsoRwBVdz:tmoYU/VIZZ8XsRktTZRkVdz

    Score
    3/10
    discovery
    behavioral7

    • Target

      Files/CVB/CVCImg.dll

    • Size

      1.1MB

    • MD5

      96e1c7876048f4cf04fa060e87d616dc

    • SHA1

      4b3763841016dae5293e5835c4260deb2bee8ff8

    • SHA256

      d3f13a1e904ad3a2a05ea4bb4e68ca881ccbe011a29183e48c49316cfec9b429

    • SHA512

      9b187c64605a4ada6c6cebc0ecc46b08bb89726239c06a1c1599a9c809afe594fbf55871f0f4d0f39a8dfad368b03bfe25e006f3a26dcffb3e38e1a9a958e158

    • SSDEEP

      24576:0S6hFdu4T16TtaY7B0bKPz4cYaVOncDkoKIUiuvPor6fmKu:05du4T1tMnVrklor6fmKu

    Score
    3/10
    discovery
    behavioral8

    • Target

      Files/CVB/CVCUtilities.dll

    • Size

      521KB

    • MD5

      ebb44d829efac54b743794eab54f144d

    • SHA1

      f5c49cbf9648e1ee0171c0f39b116fe28ff048bb

    • SHA256

      5de748b7af7afc3c0b8591660b06c6b2c6a3941313f9575915faa7b4f508dce5

    • SHA512

      662a6880f09872bc0ff750dfaa2dfb3566f5d59cd53a1d5bc95097e05b3ef123039b9a79f45ca3d09ebc80f2fe0e6f344a81e557e103e7647961a06e07c36b27

    • SSDEEP

      6144:1ol/3Qr4QfP6mJGheT7bnBd85c2rMTI2/hOXiiPexFFIlQDrxQnO8gOjgBw99TPQ:QK79Tn3p2oTzpmCFIehQO9mZPhfwL

    Score
    3/10
    discovery
    behavioral9

    • Target

      Files/CVB/CVCdisp.dll

    • Size

      693KB

    • MD5

      c3d2de79e438cade80c9ccd0f8365c1a

    • SHA1

      31f909fa4cc657eded2210a515566c3b9c88f347

    • SHA256

      d639a2d4ab128a454dd48e5eef589143da1624a179b7f3d4497173ebf7efc477

    • SHA512

      62a93f07f5e6ab857c92cc20845b17907a74c7986f3535560a0587df339762cf47058c806ed1506b79e5b252e013f420182133c99c5d22c447031321c13a10f3

    • SSDEEP

      12288:vqlF0GCV5MJW8u5aSIxYQt5H6q8L5t+bT1CCpLzlPcHlfEq8:YCV5MJW8u5aSIxYQt5aq8yZpL50HhEq8

    Score
    3/10
    discovery
    behavioral10

    • Target

      Files/CVB/CVdisplay.ocx

    • Size

      477KB

    • MD5

      f0ad39fab574e8096e0531ed4c0cbe91

    • SHA1

      2d918ba6ac6f844abe61b34ecbd3502485b38a01

    • SHA256

      e10f379c9844a84ee27ef2c38d57aaf10efb18a9e26457901caff16e326465e5

    • SHA512

      41d38ec86aaf50f444a8d1359f3a9e94c3e99fd560dd890bc49882dd499d30458a2b272489e08684e3a8015e52f1690b3394e369b7fc604898a0266c307337b9

    • SSDEEP

      6144:f8Jep0Hf/IM7B8HK+jM1/sCvsWAQTwY/yCmt1n0Srl0948/18XYOgR9D7KbPi2IM:f8Jep0oHdjGjFFT7pmnr2421sMvkPvP

    Score
    3/10
    discovery
    behavioral11

    • Target

      Files/CVB/CVgrabber.ocx

    • Size

      125KB

    • MD5

      d96124bd89370019eaa959e4c6adb09f

    • SHA1

      002c1cac6da914343ef99a5961fcf25d58a7e890

    • SHA256

      abf807e0b932962583444d8c74d2372cb4ada8c154c7eb7b980bd548e9811e39

    • SHA512

      94f7ac4d3cb5263c0957662bfdd87875eab518ac78571acba07b3216c1f20108fa034b9671f420124629eb89620912021e67fb311fd976c93fe45a1c98575343

    • SSDEEP

      3072:KYkqRUUbNTb+ygoqyOAcDwD2InqQvVG6z:rRUUbx7gEOATD2Iq0VNz

    Score
    3/10
    discovery
    behavioral12

    • Target

      Files/CVB/CVimage.ocx

    • Size

      457KB

    • MD5

      96c35406f3c70a7b8a279cbd87dd582e

    • SHA1

      9c63839df75f7a8164ca8ab8a8a3cfab3eaf5d5c

    • SHA256

      4ed6621b288f2dc1bf9e6a928126a2b2627a71b5850950d5cddb79b97877c0e3

    • SHA512

      8ad4431a5d4a610376e7bddc6a7b01853d843c34408b567894ce86bfc0deae1d752c6f1dbe79b0cdf7527067d15232a7c8cd67412e20097d29f9565905825a25

    • SSDEEP

      6144:LPm8ywrnmWQSfQGtLnlKCutVjFTs/S5VN2gnEq2qeOxOgI9n753PU2IEDX/lO6J:zm8zQwECchTsa0gEqlO7dPvjg2

    Score
    3/10
    discovery
    behavioral13

    • Target

      Files/CVB/Gear32sd.dll

    • Size

      901KB

    • MD5

      ef81974a7b27457d5760674c7d674867

    • SHA1

      a33cf69b5dfbf40d888d5b209bd81672c5b451d0

    • SHA256

      732574a6e3e0abff48c5ffdd47a397c0b6aaf202465f769e6df4d2ebeecb4efe

    • SHA512

      49487416f7dc3cb6468350dba0198b30d2822cf7450e5d3b8f8737ea3262ee190c4ca77c896ce543f0f482d9270eb61d4fe13257fc96e28bb0015e175b7bfa36

    • SSDEEP

      12288:Cp/I5L8+74NL2WRsGxiAoXaZQ35xK0UiddXpLiliElSiOrX:uUL14R7NiJXaZQ35o0UudX5ilW9

    Score
    3/10
    discovery
    behavioral14

    • Target

      Files/CVB/Sentinel_7_6_1/Sentinel Protection Installer 7.6.1.exe

    • Size

      8.0MB

    • MD5

      00a23feb0fb1da19a4576784364c7a63

    • SHA1

      07b35395c28839d01d6f6c6a0fb5e71607e7d98e

    • SHA256

      725a4941ed8355add4a47d067d0de93ba3f5fadb2dc9f2e3a4eb3f4a1c838265

    • SHA512

      da1c92be00aebdc519c58ad3a9fbbdea7aa20ef4b2b418fb66c7381a48fcf677e0dc9452931c20e2a05e289d4f86615d1431475e6a2365951d7b93937d28c640

    • SSDEEP

      196608:GXu6WgJovY1sptWEF2Bo25+HN8nmlzF4ic5h4EJoiH0:n67oaYY95+HNsmlzWiYmiH0

    Score
    8/10
    discoverypersistenceprivilege_escalation

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral15

    • Target

      Files/CVB/Sentinel_7_6_1/Sentinel_setup.bat

    • Size

      92B

    • MD5

      05c5516078d9c282e96bd42f8dd05937

    • SHA1

      e155c87747beaf61935d327c195cd19df0c9f1b8

    • SHA256

      df734171cda9b3ba481d3096cf44a3d3607a26169c66305d86b91971d106da5b

    • SHA512

      e3d9fb6b9543567487ce0e98693ee5da6537afcc5dadb513b3c6c81ea956208116b35d6a97c0f2841af4ffda3abdae0829eb4eed9d90f696e65ca089df2729de

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral16

    • Target

      Files/CVB/pOLE.dll

    • Size

      541KB

    • MD5

      4db9ee66589f9ee13491b0f12d4f54fe

    • SHA1

      93a97a424c701d6324640a09971e5792da9f2ebe

    • SHA256

      c0bc0a9964f3c9897e404482479ba4e697f537cefe4de72bab5959743dcfc914

    • SHA512

      1463bea4b51d9e0106721a9aa0c6872c5071b6ff6aead0ff01a3bbc43949a209aec1f929e9b484b985e52021b0d43b4a520a9858d071e59d6dab4c34c4983a8f

    • SSDEEP

      6144:94XauzVMeomIrnA7tehonTed8Upk384cqqDL6VL8o9dgkqNqIfOD2Jy/fBSsb:9f7clYUTeJpNuqn6V4o9dEJyhd

    Score
    3/10
    discovery
    behavioral17

    • Target

      Files/CameraControl.dll

    • Size

      417KB

    • MD5

      6b7820f918960945f994dd77df7b2b13

    • SHA1

      0b4511594d0e31d1f0ad814c60b73d6b2b779a86

    • SHA256

      3865a5069a59bb6386268b32feeb6db37cec198b052243dfb3460d5d20bef5d4

    • SHA512

      844bf4e809a2dc7351e40a3a6a54becb710d4e67096e2c061d38f76386f31a70152f9f0dc2225f225042139b5c7bdcc66561852450b45ef2af720468107c198e

    • SSDEEP

      12288:6rHohZaxe7urtxgdGjbDR3Hr+w1NrKeI:6cFurtxgy5X9NrK

    Score
    3/10
    discovery
    behavioral18

    • Target

      Files/Drivers/CVPXR.vin

    • Size

      84KB

    • MD5

      15f11ee7a2eee9b7955090369a371b09

    • SHA1

      c70607a8f426f750c56d1bb48644a84e28a61364

    • SHA256

      ef77569e99df629223e5e3f902768b4b5fd553b172123e9f95927c79743e0ac1

    • SHA512

      ce5885827f58e01339c8e4ac04437b77ed2390d98906700a638ac13753b2f8d3007bcb437946a0ba569af60e64260496e35f11c154cff331e2ce07588f2fc128

    • SSDEEP

      768:oLPJn4CIsDHsrOYKbNhyJT/raDKQ6CpBCBSVJ008r7NXqEmwY6GmiB9omUK07HJJ:S4y1jKJT/ra+DGXV98r5Xf64zaoL

    Score
    3/10
    discovery
    behavioral19

    • Target

      Files/Drivers/cv1394Pylon.vin

    • Size

      309KB

    • MD5

      2d69444d0e409fca5edbc768fb4621c4

    • SHA1

      5833f4f2ef7d5da10b3c76bfe7b4c041fca749f9

    • SHA256

      86334233a2922847e5f78f1a1c71d367141c9de39e6d1f2dd1ce572997bd853a

    • SHA512

      c96cbb14c123dede89e2146a48107304558e1d5442c2a81e0609046294861578bfd484baee9bcf8c92c4b4f21c378d0936c328b97cf871a4d01e155578a54cfa

    • SSDEEP

      6144:f6OT0jRu6bPJ3B0wiCMBXstqqBQEQnOngLUU:fv0jcoP9MBXqBQEQcU

    Score
    3/10
    discovery
    behavioral20

    • Target

      Files/Drivers/cvU3VPylon.vin

    • Size

      833KB

    • MD5

      84c64129c15a6879c4409a83e57bc674

    • SHA1

      8b142af337cc9b3ea71ab21b797bb8a14720758c

    • SHA256

      bc50f181de8643c001104ab5d44cfa88b6e23442830537a5a88afe02946aad41

    • SHA512

      ae2bd6cf43b7622f068144fd7e49469895efbdfdb26172a8c4637a93ff1c6547699e1b2b946fd012f1c256aef5aa29bd7ea786040aaf689064ca019cb0dd134d

    • SSDEEP

      12288:BtmIkohdUWVzAo23wBPu08LGdC1u2fre4P7lu2mDkxUCCGthWYxnW6KF0TQemuz6:ev5Uunv3Jcj7tGcl

    Score
    3/10
    discovery
    behavioral21

    • Target

      Files/MSG_DLL.DLL

    • Size

      362KB

    • MD5

      6530b8a1edf42baded99729f2e7274cd

    • SHA1

      577f275fa42a4353c3bc70ba03985267139fbdfa

    • SHA256

      5e4f566d47d57208ae2d69dd7d26d7015cbc4bbf41ddb7f02a34e7c6dacc2665

    • SHA512

      4fe8930e92459d6317b9627775f467b92b6e4052736e6631e02ded6bd9250e6fba57c4a3ad7bf0a601846f5e87c0a480bc173edbe35f799316db1bd6959c78ff

    • SSDEEP

      6144:aunzvB0GGmGMXO65yGeU96zhgp71vllS/obmGwrslDy4kl:LzvB0GGmXXc9g516Kpwrsw4q

    Score
    3/10
    discovery
    behavioral22

    • Target

      Files/ResultsData/Ames Sorcerer Template V3.xls

    • Size

      65KB

    • MD5

      c90bd281ec3e023ce964b7fed3b6141b

    • SHA1

      068bdf63076aab80286adaf9a23bd03a1dbc7afd

    • SHA256

      210d558dba73f0785c243fb64aa8ad89992623839753f72fbf2bc79080aecdc5

    • SHA512

      657555d77bd8a60b3f743fa5b6f0c445ff550c3dacbbc676189b5c63a8a7bab10f477a3edc791ec6cdc1bbc2dbb43a08f46d2db5921e21ed4761a1d4636e2a72

    • SSDEEP

      768:HbX7jZuQqVIEBxoK4YNAbrojKu6W2Xzso2DG5/qv9G0Ojwoxhk:n8lVIEKYaPd1/X6DG5CvI0Ojzh

    Score
    1/10
    behavioral23

    • Target

      Files/ResultsData/Counting1000.xls

    • Size

      442KB

    • MD5

      b92e9e0e8ede0a463b87353a02072a02

    • SHA1

      6ba836178334e44da6666bcd6fe6b0f396613606

    • SHA256

      4891d66aa13dc2ece58b9497064b688deb43abccaefa9ffa5c03291cbe933f15

    • SHA512

      0443c077b965aad4abf60d99f4c46253146ebadadc6c2a9d6593dd4f3ed045355ad990f944678f5d01d679b6b4c18984582fd2d3153d94cd1e2f91b42940e48a

    • SSDEEP

      3072:0iRqtn9g0GILdASxNFIxfJqmonH8C+AYqm5fnBfoaI+ozKfwpwYiYO9TCDS:0img0G8b0qmongqABwfgZCD

    Score
    1/10
    behavioral24

    • Target

      Files/ResultsData/Install_test_data_verify_2002_2.XLS

    • Size

      129KB

    • MD5

      43b114f2b8e987f2a7487b7c94d629ac

    • SHA1

      631e1c14fb8480452c9a2a16c8ba5bb28b9a3fa2

    • SHA256

      c1d5f9ee90c5237aec57d7ea77c17100b94660ca21493aa2a742ef6fd4944cb1

    • SHA512

      77868a018e26308e8b02ff8ac0f7b4c10b4dec7ce5cc5ec2701329dc80fb307a3efdd883ba52b98669394d29b8ac0d6ec31b68dd396371c266c1717373dc7447

    • SSDEEP

      1536:XZ6n9Ipm/rVQMaY+GN/+RdmNriKkFmdxUCGk:pQ/r+MaK/+zf

    Score
    1/10
    behavioral25

    • Target

      Files/ResultsData/Read_Feature_Data_File_Demo.xls

    • Size

      22KB

    • MD5

      0c093c4ea71984bb5b683bc7a7b7024f

    • SHA1

      25d47c6c7f7352a31cc2772370bf32769ed55ff9

    • SHA256

      99dd6002360cb17563a46ca2e7d7571cac2d73db7bbe1c1a1a10f834aaffb9a3

    • SHA512

      d21254df9f2d3ee61587d3431c32b8ab822341781879fa75bb5d0b471d35949f93c2316c59fe0648a68428dd969d6742c4abd1458fba09d6eeb1ac819d8337fa

    • SSDEEP

      192:n5r1RgaN/l/H/gYz4Y7Y/cQhjP0RjNuxrJU+3Uvs5gVPav:5R6WdfIPIch70RxuXU+3Uvl

    Score
    1/10
    behavioral26

    • Target

      Files/ResultsData/Template.xls

    • Size

      103KB

    • MD5

      0605527101293195536a9957998d85e4

    • SHA1

      a1262344a589e8c42481c64d6e48ebdafa8500d3

    • SHA256

      7b73ce3808ddabe35c9b06a8fe984dfd17045e3d0a40ce7b66560d0016e4e45f

    • SHA512

      619ef33c66a2d01ab8fb29491c9dc7931bcad838f35523ae2f4a6118f6dbc548a6504b841196cbb5906e6e8bf58dc590d8202963df66fd9ffc928d9ad1fb9959

    • SSDEEP

      1536:JG252odyZdD5lKMN+oCQcQoqge4pnd/C+7NDNjt49b1UiwKkSoqi1Cg6pQPhH9/:ECX88ho8YF

    Score
    1/10
    behavioral27

    • Target

      Files/ResultsData/Template.xlsm

    • Size

      41KB

    • MD5

      225f6d1f5f066a4f4e6a16c13489499b

    • SHA1

      f3132b306cc5cae8ebef25db17d9a2788596151c

    • SHA256

      9cc1df9bfc1931d01480439fa4543dca4fccabb996e041a7f93f682ed37f3538

    • SHA512

      260500c3af842a8136bc5a2f9152e96cc2b47eb9a7a40629876c414cedf96d53b208edcd0064aedc9c4266bdad3952ee93f94e328b3d26ac00ca47a9abf2828c

    • SSDEEP

      768:NudXHS2j3dk4Zb3Xw4TsIcDJ+5UjSEzXfIhgswBP+Vn+Pn5jSeyuH93FrErl4:IdXSE3W4lYpnEZEWVn0Fy2Fc4

    Score
    1/10
    behavioral28

    • Target

      Files/ResultsData/remote.dll

    • Size

      363KB

    • MD5

      2466533c1bc942a4e1c6d21cfe7db1dd

    • SHA1

      1ef8f4d937be23b5c3bf539a7795d9a663e5b27e

    • SHA256

      b74e856d20e5af5ab17e67f6410b3e08dbddb2bf2bec63b846a7dc2c99d64045

    • SHA512

      059ceae6c8b5358ee165d762a1f2779de6831dd1508ef6dcd122018e4e62138c91d19c7648185ad3e8fcf5ddb262a1653d748e2d7745fce3e0b622128c7a0648

    • SSDEEP

      6144:nunzvB0GGmGMXO65yG10Cl8z2bupyUF+keab0DU0YrRVFXQ0l:mzvB0GGmXX/3G8upyaec4U0oJXQ6

    Score
    3/10
    discovery
    behavioral29

    • Target

      Files/ResultsData/scrolldemo3_0.xls

    • Size

      71KB

    • MD5

      a7c3af3271c620504c205d67ff6b4060

    • SHA1

      3088da44ee71fe9c8b74e0d1b4aa362dd27a6984

    • SHA256

      0fa9ead4bd3db3f369d98a36aab777a88f37a27469b1005a0455acaf5e4f2ab0

    • SHA512

      61abd35cd982d8dc1dd554f70675ca3f2ac8502dc8e9f64eae598b4929a42bc25479ebfd1958b81571c8aa6a9ac47aee4d71bea1936a8a4921cfae09a525dca4

    • SSDEEP

      1536:1DRHlyJVdtwIavH2jAFBs1RTqV/gF1hRACWtPz:1lHgJb/jAFBYRTqV61hRAdtr

    Score
    1/10
    behavioral30

    • Target

      Files/ResultsData/scrolldemo3_0_With_Feature_Dat_Demo.xls

    • Size

      70KB

    • MD5

      44d7f31f4ad4365ba32d123b53bf61e7

    • SHA1

      b2aa22130c77fdd8c2f146efbb816c810b5e7482

    • SHA256

      f2f41e2addbcbcd07099ed600145aba22b64262abe6e8432356438f84fdaece9

    • SHA512

      ddf46e726f9bbbf3db2e6a4d99b7ce81f5b42d52a2aa9094732305719cb522795325e781ba89f1aaa746906b14bc3fb37964a0700b48d70e6c9ce9891ae66d59

    • SSDEEP

      1536:0DRHl3ghdlYXa5gCs1VL/+M2EgcVTfeRMRRYu:0lHl3++6gCYVp2CVyRMQu

    Score
    1/10
    behavioral31

    • Target

      Files/Sorcerer.exe

    • Size

      4.3MB

    • MD5

      c8395c0ad5c01e3a2cecdbfee7ce48f4

    • SHA1

      b967511d1616d9293e2f721858b726fb51a1e5f2

    • SHA256

      22c4bca220ba136a7c6c86ec78a1ba73707708a98703e73a5b47901672cad3b6

    • SHA512

      0f201d91f0819d0d4187edfc3b6c61561d781d7c875fa8e0ce0610bdce09f160597e3d49281411855f83909a166bcbc8170f72052c6e9b223646cd93967ff783

    • SSDEEP

      49152:5WUZH65GqFc7kM8H6u3kHUbgxrBHBvDdw/WcLvffHwL8i:53+Fc7kMi18BhvD6/hy

    Score
    3/10
    discovery
    behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

pdflinkmacromacro_on_action
Score
8/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

Score
1/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discoverypersistenceprivilege_escalation
Score
8/10

behavioral16

discovery
Score
8/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

discovery
Score
3/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

discovery
Score
3/10