Overview

overview

10

Static

static

1

=?UTF-8?B?...?=.xls

windows10-2004-x64

10

=?UTF-8?B?...?=.xls

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    =?UTF-8?B?U2F0xLFuX0FsbWFfU2lwYXJpxZ9pX3ZlX1Rla2xpZl9UYWxlYmlfUE8wOTIwMzg4Lnhscw==?=
  • Size 784KB
  • Sample260716-kve2dacx3w
  • SHA256 d26c2fb14d85c8d1d31bb271590c9c9d694a891e2db4385e6c7dc16bf6c9d481
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
persistenceransomware

Malware Config

Targets

    • Target
      =?UTF-8?B?U2F0xLFuX0FsbWFfU2lwYXJpxZ9pX3ZlX1Rla2xpZl9UYWxlYmlfUE8wOTIwMzg4Lnhscw==?=
    • Size 784KB
    • SHA256 d26c2fb14d85c8d1d31bb271590c9c9d694a891e2db4385e6c7dc16bf6c9d481
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    persistenceransomware

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks