Overview

overview

7

Static

static

BL.docx

windows7_x64

7

BL.docx

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    BL.docx

  • Size

    11KB

  • Sample

    210223-v5shtljs52

  • MD5

    fc66a3769634961a13db2ae87003e6ec

  • SHA1

    b7ba704348fbe46679ccb933ebc005b396ddbfe1

  • SHA256

    8246e04a9979f16d303903d1f899bc9e5fca8e830d5d44cd1b9070d09e01a85c

  • SHA512

    364cd01d7e3f93465ae3e4fda72f618cbcdc0029f8a71dc96b518b06b7acdd652b4e9feac7b2b3f010f895692520273188252c6ad0388fe49fbd463d77aebef3

Score
7/10

Malware Config

Targets

    • Target

      BL.docx

    • Size

      11KB

    • MD5

      fc66a3769634961a13db2ae87003e6ec

    • SHA1

      b7ba704348fbe46679ccb933ebc005b396ddbfe1

    • SHA256

      8246e04a9979f16d303903d1f899bc9e5fca8e830d5d44cd1b9070d09e01a85c

    • SHA512

      364cd01d7e3f93465ae3e4fda72f618cbcdc0029f8a71dc96b518b06b7acdd652b4e9feac7b2b3f010f895692520273188252c6ad0388fe49fbd463d77aebef3

    Score
    7/10

    • Abuses OpenXML format to download file from external location

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks