Overview

overview

8

Static

static

MV FORTUNE...R.xlsx

windows7_x64

8

MV FORTUNE...R.xlsx

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MV FORTUNE TRADER.xlsx

  • Size

    2.4MB

  • Sample

    210216-7fg6rewc5e

  • MD5

    b9d2e20a706f5dccd80cbfca09685732

  • SHA1

    b3d2b8eaa620398c83ff203c3c705d03dad55288

  • SHA256

    132f5ce3c879259992351ae90865928ed508f5a76ab3f97ce6cd624ecccb551d

  • SHA512

    4c03476532bf33d64c42c9d2758ec1b55812869881586d83bd76b7f0887c2333cf0e71867fbe87cedaa6d985cc448612ce4e3df0a2a8dad177f5afe94faae66a

Score
8/10

Malware Config

Targets

    • Target

      MV FORTUNE TRADER.xlsx

    • Size

      2.4MB

    • MD5

      b9d2e20a706f5dccd80cbfca09685732

    • SHA1

      b3d2b8eaa620398c83ff203c3c705d03dad55288

    • SHA256

      132f5ce3c879259992351ae90865928ed508f5a76ab3f97ce6cd624ecccb551d

    • SHA512

      4c03476532bf33d64c42c9d2758ec1b55812869881586d83bd76b7f0887c2333cf0e71867fbe87cedaa6d985cc448612ce4e3df0a2a8dad177f5afe94faae66a

    Score
    8/10

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Exploitation for Client Execution

1
T1203

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks