Overview

overview

6

Static

static

1

roomspace.xlsx

windows10-2004-x64

6

roomspace.xlsx

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Roomspace Ltd - RFP Invitation.eml
  • Size 4.1MB
  • Sample260622-rxp3pac15k
  • SHA256 ac44b2eed1b463987b8fcfc3604126a6390e7e9d1e706b06e1517bfac699290c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
microsoftdiscoveryphishing

Malware Config

Targets

    • Target
      roomspace.xlsx
    • Size 56KB
    • SHA256 a77fd786dd5959cbcd413f435c9e469bcb3c2edf39ccf8d0d5ecbeb51fa8a94c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    microsoftdiscoveryphishing

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Detected potential entity reuse from brand MICROSOFT.

      phishingmicrosoft
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks