Overview

overview

10

Static

static

8

493674902257.xls

windows7_x64

10

493674902257.xls

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    493674902257.xls
  • Size 287KB
  • Sample201109-vkk82tmlna
  • SHA256 6574309e9e7c496936683f6375b8ae940039249fb2b550d55ca914ea0daabf8f
  • MD5 SHA1 SHA512
Score
10/10
macro

Malware Config

Extracted

Language

  • ps1

Deobfuscated
Source
URLs
  • ps1.dropper

    http://brutecleaner.com/Sheet.ps1

Targets

    • Target
      493674902257.xls
    • Size 287KB
    • SHA256 6574309e9e7c496936683f6375b8ae940039249fb2b550d55ca914ea0daabf8f
    • MD5 SHA1 SHA512
    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks