Overview

overview

10

Static

static

3

11f44531fb...71.xls

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    11f44531fb088d31307d87b01e8eabff.zip.zip
  • Size 106KB
  • Sample261026-vv9wvsvs8j
  • SHA256 38b01a12b8dcd39ebdcf9e97772e848237330eb227e1ccee80125564b27377e5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Language

  • xlm4.0

Source
URLs
  • xlm40.dropper

    https://nws.visionconsulting.ro/N1G1KCXA/dot.html
  • xlm40.dropper

    https://royalpalm.sparkblue.lk/vCNhYrq3Yg8/dot.html

Targets

    • Target
      11f44531fb088d31307d87b01e8eabff/research-1646684671.xls
    • Size 648KB
    • SHA256 1df68d55968bb9d2db4d0d18155188a03a442850ff543c8595166ac6987df820
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks