Overview

overview

10

Static

static

8

0051b30a58...b.xlsb

windows10-2004-x64

10

0051b30a58...b.xlsb

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    0051b30a58c3e366fd12a498f537caba487be76683c6bf7bc19937d205f8423b.xlsx
  • Size 26KB
  • Sample260905-cbm9msvcme
  • SHA256 0051b30a58c3e366fd12a498f537caba487be76683c6bf7bc19937d205f8423b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
macroxlm

Malware Config

Extracted

Language

  • xlm4.0

Source
URLs
  • xlm40.dropper

    https://kacedu.in/ds/4.gif

Extracted

Language

  • xlm4.0

Source
URLs
  • xlm40.dropper

    https://kacedu.in/ds/4.gif

Targets

    • Target
      0051b30a58c3e366fd12a498f537caba487be76683c6bf7bc19937d205f8423b.xlsx
    • Size 26KB
    • SHA256 0051b30a58c3e366fd12a498f537caba487be76683c6bf7bc19937d205f8423b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks