Overview

overview

10

Static

static

1

DISA-PO 56...99.xls

windows10-2004-x64

10

DISA-PO 56...99.xls

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    DISA-PO 56167-400 -55599.xls
  • Size 53KB
  • Sample261023-ksvdaaxtay
  • SHA256 ec120f7a01848d7ff6e8e0e284644ef09f06b1331a41db0a4c4f06008f6bbda5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
persistenceransomware

Malware Config

Targets

    • Target
      DISA-PO 56167-400 -55599.xls
    • Size 53KB
    • SHA256 ec120f7a01848d7ff6e8e0e284644ef09f06b1331a41db0a4c4f06008f6bbda5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    persistenceransomware

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks