Overview

overview

8

Static

static

8

WorkbookOp...n.xlam

windows10-2004-x64

1

WorkbookOp...n.xlam

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    WorkbookOpenAddin.xlam
  • Size 13KB
  • Sample260624-rtfd3scy5y
  • SHA256 0d3ed6b945b4f564b8e666855c1593fcb6dd5279ecf9487915bbc1b0ca9bab9b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
macro

Malware Config

Targets

    • Target
      WorkbookOpenAddin.xlam
    • Size 13KB
    • SHA256 0d3ed6b945b4f564b8e666855c1593fcb6dd5279ecf9487915bbc1b0ca9bab9b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks