ac2a60496e77c6941fd7e3e670b8924f253af6ddc4fcbe18433e09e300c5836a

Sharing

Copy URL Twitter E-mail

General

Target
FM-EMF.zip
Size 627KB
Sample260717-w3mlzaew9v
SHA256 ac2a60496e77c6941fd7e3e670b8924f253af6ddc4fcbe18433e09e300c5836a
MD5 bfba2da9ce0260fde8ab0b30b97bd537
SHA1 baa9be535c18aad7742253620febb9682cc76b49
SHA512 b1dd1cdf6295263317f5ad62fc7f6dd46c8e44d1feaebc1ad1893e73dcced1075d2552a3bf4cebd33a3110c7ef0617f6ca2d31658212325dfb72630015c948ce
SSDEEP 12288:1DV4yovwM745WkXUuJR55dZlftIfVUzw+kzTicCXlv1J6/iD:1+Dn4k839flmNUS2cCXlvsu
TLSH
T1FAD423B0CB4CC14BE59F4EB0E6665B3E694D373A8754A2CE9C888C86C4F6A795607203
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Targets

- Target
  FM EMF/FM1000.xlsx
- Size 75KB
- SHA256 f802f7514938ceafd2dcd80e4904fc44d7b5a774da176d26899de975b5131698
- MD5 9904715948c0775f6eb4305982957208
- SHA1 658db9f6f8a250aa3f0568701794453fe02ee73b
- SHA512 db1f71119057c158147ba0b5219952797afb4e16fb534c951c95e8ed6f2a5a1364c309c377e4402f88dda7d789db7a8c16a023b7ad16ffe5c8b655f52f5d594f
- SSDEEP 1536:syZjXcEbEF/EW4lOKp4I8PDVWRZPFW7cUmS8k0eebddoxhKvfqQPUI:syZjK/E6LVWRZ6Lp50eewKVUI
- TLSH
  T16273F1CD8160AC72C863F03CC8911DD6EE18F4E69666D45DD838D6D48C5A2C72FE2B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  FM EMF/FM1101.xlsx
- Size 16KB
- SHA256 047d4e265143edb7be646dfad5ff69bd85e9bf63e4f7210d61e9729cff3db0d7
- MD5 2baa958dc1a684f7efe4aa22deec6cc9
- SHA1 72141bd41bedc5663e0092641798943deb2529b0
- SHA512 c4307da59133c526f09f3da3f686aec15b93ab1cbda729231564d1cec288b7aef5caf20a7057ccfaebc329391dfbe2166df3d82e5658ce479f57d8a874fa1844
- SSDEEP 192:ushLTCL8c/wgJn/g+kIENhVoVxfTWrwvZX2gOdH0eFLxSxL9x5NizudoRg5r3RIX:p2Z/FJn/g+HENmxfTHdohVgjxbi5Sa
- TLSH
  T152729D6AC757ED1CC7219C3CC19A0DA961993C5A8B11864EF858B2CC7A9316F33887CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  FM EMF/FM1103.xlsx
- Size 12KB
- SHA256 89cd346966e78272f2ee49c7424974205d4b525590aeea5e9abf829adbca4948
- MD5 1c33e8dd05aca66980395a620e17e74f
- SHA1 2f1e3703185012302d9713e8bac9e88de875bc31
- SHA512 8fcf091e4069fd2b57b8bbdc22dc9f662513825cc4639b7a32fbe9575eeb1afa2ee33f56b02b8ec62a2fdb872c941e1413c66c657dccfdd9d82954c6bcdf15d4
- SSDEEP 192:ushLXe4baYxfTWrwvu0hV4pb27FJPJmGjarir3R3Y:pXe4VxfTHMpWJrj7C
- TLSH
  T1B0428CB9C247A93CC973043E814D24E59356EC4A9452B5DD3864B38CAE821DB13DEBFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  FM EMF/FM1104.xlsx
- Size 13KB
- SHA256 6ffad00dcbb8e9f4884c607829492776bf99397a824181e4ea72921333916a13
- MD5 d4a7e9341bf76bbf26a10cd107582777
- SHA1 34af734050d4e3ca6741a7b8001e2b8eb05532d7
- SHA512 d46966e4d850f2dc6339cdd40d689f66c44f5b12912babda65173d7166918eebda971dbd659cfcb70fc6bbfa995cc30b452d45b28fc895e3da4dac404f8c7ed1
- SSDEEP 192:ushLoh1ceSkP7QpxfTWrwvUJVL8X8dulF8e4PwZpI96dIh0jr3Rzdhb:pKceSW72xfTHcbgMd1FYE6dg03Dhb
- TLSH
  T17D529E6AC5DBBC1CE5214C3DD24C06D0A31B68999854928E3444FF9C66C399753DF3EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  FM EMF/FM1105.xlsx
- Size 12KB
- SHA256 c68a68111c7f22434d735d29572bd083fdbddc353908d342cb534a840a89d13c
- MD5 a11d92572a65ff08691f6beb2eb53479
- SHA1 04d9ecff0f8079d83c18631876b8a3e9328bf11d
- SHA512 39afe14a10540ce64c104a4f81ee030f5fbf80c6c73273732ef8e020d9f50c6c87b25a71dc5ada92fd866d23cd0e1b7c21103ac8c7707ad686b37fa90963a768
- SSDEEP 192:ushL9UkbFGXxfTWrwvKSppd9DUkIQr21LC8W801wSX/r3RMwbnq:pXQXxfTHdpd6kI5FC8owYLZnq
- TLSH
  T14A429F7FC647F87CC577583CC14C28E1520EEC90D953D59E7854A29E5AC12AB03EE6D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  FM EMF/FM1106.xlsx
- Size 10KB
- SHA256 c6c4c24e317ada24c4da02f35aaaadd07e572ad78ed6764a22dfbff3ce450d7a
- MD5 0ed397a39a62731c29f215f13042af49
- SHA1 bd2cf47938368cb32064258f8e772977b26f5c57
- SHA512 950abc56febff62a985bd21345b32fc1af8d2342251373bcff86faf6689415286118044920f5cafa5377b785fcd2ab6385f482b45dc194cbbab79a8768df240e
- SSDEEP 192:ushL+QQSpxfTWrwvFFH0G0JaDskyVvVr3RbHOkRp:p7pxfTHwG0csxVv1NOkRp
- TLSH
  T189326D7DC552B8BDC221157CC24C2CF2D70A7D4546A1E5AF3CA5B98C6EC18D323DE19A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  FM EMF/FM1107.xlsx
- Size 10KB
- SHA256 01b2f44c8e4828974e62bf93a5eae231038a0c528a6580997d24dd6d4bb55276
- MD5 a021f9edd57577b2bc9c95c01dc736a9
- SHA1 e6bdf22ecdadd7db2f60b98d5d19e78bf59e547f
- SHA512 d70aec2a140363a19df431434c0d903914475d91b9e956ef2f910f6dc0dedd0253b0481844fba2cec79c6f2daebde03ccadacd873789fda5d4f67edfe087f8d8
- SSDEEP 192:ushLbgCCi7b8xfTWrwvXqzq71w4w2n6eUSBfr3RVco:p7Ci7oxfTHvl1lBrx
- TLSH
  T18C329EA7DA07B47CC563443DC18D08F2434A68C991D1E59FB868F28D7A9059B13CE7DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  FM EMF/FM1108.xlsx
- Size 12KB
- SHA256 65cfe6bc3382231a2581b02baabc5a6fad006b13c244815d3a9a92f9d48b6da1
- MD5 27f80f5bea9693999a764ffbebb79b4c
- SHA1 9e7ffd966ae9c07c8dce31cec512efa384019781
- SHA512 69478d4a9ddef861570e1465b52d1c60a6ce3a38c7f8e62383ab581b085e054715d61c14994d98d142646178c7ac7ff8822116bbe9c75ed4caf5d0473569ddb3
- SSDEEP 192:ushL9Q8w6FBPxfTWrwvAMH8EM6/7F+6uM/RoNARlr3Rbv:p9QEFBPxfTHJY6/7UQwsl5
- TLSH
  T15C428DADCA67F01DC677087C814D08D4A21B78C6A951F5ADB4B4AD8C268726F53CD2D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  FM EMF/FM1109.xlsx
- Size 15KB
- SHA256 0e2ee0063a6d27cdb9f2cca6e93732320e510d140b438f6bcffc0c8329ea1cdc
- MD5 e8586a1db9bc0f9f4be9ebdec1adea32
- SHA1 1ca03fcbe736779650a0a8623d3fd80362cb8acc
- SHA512 0c08e34f4785db128af19b8efe46c11878e28661cb4cf53c5ff0abe527ee88b4f06d4e983624cba5a2055a339fbff93b1fcae9b8500fb1e6c79d07754876e3d0
- SSDEEP 384:p5PClxfTH3sX+uUG4LHVO2ZPh9GM6ez2xCip0NuuAH2G9g:pYfICLMzfvLWGm
- TLSH
  T10962B08CCAB7F828CD27857CCA9F34D0610A74E64A23660D74E8B79E15C269307C57F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  FM EMF/FM1110.xlsx
- Size 15KB
- SHA256 ae56b3e9736ac17b3d5a1d9679ae5d5f9acb97918d4c2f0bc5a2ace9dbbdbd34
- MD5 94afa97cb05f9c9a1e9ec779b69bb507
- SHA1 aafbcac71aee2b47a53e9728d85e8c01b53e4bbd
- SHA512 ffaed911a85a644da1f85ecebcb9e874ce970d1e3c70eba0eab753850364a681e2faade70a058899d0e4ed1e0c6fb9a91bdc4bfac5ba72f671aeb5a352a3dc68
- SSDEEP 384:pGlpbj5DfALxfTHnCD3BLemCe1vvn+cAHr4lV:pGEfjCfkkv
- TLSH
  T1D7629E9DCA077C3CC653193C4B8A15F56511B8A94826118F3C3AF2AD69C1A9B13DB2FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  FM EMF/FM1111.xlsx
- Size 12KB
- SHA256 da5c7a73af23d5715f746ac834676c20317e9c69d90a383d897caedb3c6d9299
- MD5 18f64666121f40f18e2b3092f5ce74d2
- SHA1 0c857ad1d1689a6dcc4bc6715d1a6cc2b1d67ce2
- SHA512 4c7db3f3ca98c87b8cd748b491a08d1c0b438d5e93cd0a0b370511739ba5f55a199647bbe781826c3ee3f6bf316337236f1c669e34daebb325c5f95e228a76fc
- SSDEEP 192:KLb3UdSBUVNxfTWrwvI2knhrS16OJd4kDVwlGWmvUW5MzcWRnWzr3RAL/CB:KH3zUVNxfTHwPhPYSGM1RnWnA/8
- TLSH
  T149427C5DC342DC2EE1E6EC3F998E25C2770638892246948F3654B48C36C1993039F7CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  FM EMF/FM1116.xlsx
- Size 10KB
- SHA256 6b154cc09f43997a6eecd34f04f1570409242f4d3d70367b6c59184d3ac77294
- MD5 79258a436435ebbe7bcbb5c39d461a10
- SHA1 dd0c7e802f28ffa0a8f24c585f09fa2cb6dd1079
- SHA512 6a10a9aad3e80a1d6915819d2369cd8b0c3232a6e357817b3fc5747efe55418bf49ee24d8e2c24a2a12de623182bc1a3c14ea58757ceda751470b8a973a46071
- SSDEEP 192:ushLh2yFRE5m/AxfTWrwvVzq77HRWDd5WgmIxr3RLHHOVC:p1FS5moxfTHdmPRuZFnOVC
- TLSH
  T1B3328FFDC68AD43DC536087EE01D5CE1B218B85A1B9694AB7850BA8C5E430A723DF2CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  FM EMF/FM1117.xlsx
- Size 10KB
- SHA256 f69e704e1f143d04e95bc93d6a0c4ab57af14f7dcf8bfe72dd4e2025ee3a991a
- MD5 150e7fc472a084345cd256402f8d4d4e
- SHA1 896eba060d2e487a52e133f5f6fc2bfe9ccfbc20
- SHA512 fed1e67e84c6bb026840e712cf02a56ce5eb16e4e289519b79ae8f4ec5ae5ab2469eebe74e196269140314ae41c2dd4636dae349f699f5c857485b99cabcc379
- SSDEEP 192:KLb3UkxfTWrwvNYm0g6XZYafEjURe84Hn69jLYDoDr3RtTy:KH3bxfTHXodiOe1HQIDoXC
- TLSH
  T163228D5EC7426C7DC2A2147DC00E05E2D32E689D8542A69BB894F7AD69D607313CB38B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  FM EMF/FM1201.xlsx
- Size 113KB
- SHA256 7e5e7202dd9d000dd8425c75c8e7b94338337d618db8afb849f5dbebe74b0ecb
- MD5 315d6df64914a27740d1373234e87ab0
- SHA1 111a047bf7c489a7d04400be66ffa7dfd5a13216
- SHA512 00917d037ee853d9555811a969224d622a6100f942e7d09290b51344fe3cd2a861e50bcd4bcb986dc1efa1294e7e988ab4b85fcfb4ef06e0039d21198aac42e4
- SSDEEP 768:K1f704Z3k0kMkwktmYiYoYrYTYjYbYoYiYoYrYTYjYbYIYQYBYiYoYrYTYjYbYIr:K1oV1YjNMN
- TLSH
  T19BB37B1F6107F1E7B38E6276294E171E3D4E34C55CB2A6B83143BB3432AF591A4B50BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  FM EMF/FM1202.xlsx
- Size 136KB
- SHA256 357d22cee1b03e1c1683dd7275146d5d615b5f60e08f838a7412d8fa03e585d9
- MD5 0cdc408d289d3b3f891045d4ec27a692
- SHA1 22d2fe8cd53914e115dabbfd5996e2c1bbd23033
- SHA512 ce18e026798707519270d23a93a59fc885d923cb01f4a445a675ca9ab414cf3e805c95098d426233175831f4c459a9c9825161f2eceec0a6bfd3de97d6afeabe
- SSDEEP 768:KMOfQ1NcIoTLgsOChnilessssFsssssEssssSssssusssssyBK0INk3yW2Cc:KrCsC8BKB7Cc
- TLSH
  T1F3D30534DAB2CA37E427ECE16535BD7C41404C7728EC6F317B20A57E16DA0737A06AA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  FM EMF/FM1203.xlsx
- Size 62KB
- SHA256 372caed9e6e222bd0be93ec57e7c12cff3589f4c69fb2203b95fa4aef6ed6b2f
- MD5 7ee1461f8677f2ed7edc962b289c16a1
- SHA1 d6e57b3c88e87cf33c50fa6bca23038cd6317958
- SHA512 04ace825939240707154597c9156b6fcef6eb47d94279cd1f093d513f0fc9914530079a2e7c1cb271deb5d0d3555a169f7ce39370b4061e313adc9e44a6b1da2
- SSDEEP 1536:KEyt833i4MpaWx4z+pFUgYnLdLNzBpRspD:fYTpxNvULvQ
- TLSH
  T115539D78D924AE2ECF5544B7CD0BE871B284B046382FB329D4E25C34365C1B96B6DCB9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32