Overview

overview

10

Static

static

1

Payment Advise .xls

windows10-2004-x64

10

Payment Advise .xls

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Payment Advise .xls
  • Size 563KB
  • Sample260722-rlp9baar91
  • SHA256 819e1eaa4bf978608ae8cb9faebe3cbff1d3db7ef93f1c2f00e381733ab01dc6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
persistenceransomware

Malware Config

Targets

    • Target
      Payment Advise .xls
    • Size 563KB
    • SHA256 819e1eaa4bf978608ae8cb9faebe3cbff1d3db7ef93f1c2f00e381733ab01dc6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    persistenceransomware

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks