Overview

overview

8

Static

static

8

17566-17566.xls

windows7_x64

6

17566-17566.xls

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17566-17566.xls

  • Size

    736KB

  • Sample

    200712-n7qxmlwd16

  • MD5

    8074ac3927dfb130c1fb20d7b248a339

  • SHA1

    76983644278ba4979fca636ea89bd0076e64c146

  • SHA256

    c93dd3f4f5789f893339c8fb5d1ccf64f5ad56a7740c311be0fd43193e361c96

  • SHA512

    b38e9f0a63c24e577e79250d17de1302f758f2b95244b9b47e8dbb2829d134559d0e2c86f4981ad3172a99ede510a9ae85a02509887306c3711fa4d12274a22d

Score
8/10
macro

Malware Config

Targets

    • Target

      17566-17566.xls

    • Size

      736KB

    • MD5

      8074ac3927dfb130c1fb20d7b248a339

    • SHA1

      76983644278ba4979fca636ea89bd0076e64c146

    • SHA256

      c93dd3f4f5789f893339c8fb5d1ccf64f5ad56a7740c311be0fd43193e361c96

    • SHA512

      b38e9f0a63c24e577e79250d17de1302f758f2b95244b9b47e8dbb2829d134559d0e2c86f4981ad3172a99ede510a9ae85a02509887306c3711fa4d12274a22d

    Score
    6/10

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks