Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
4 IOCs
From Base64 to Reverse Shell: Unpacking Malware from a Word Document
Malware Families
Excerpt
Malware distribution through infected documents, especially Microsoft Word files containing malicious macros, is a common threat. This article explores the process of reversing malware found in a Windows Word document, highlighting the techniques used by attackers and ways to mitigate such threats. The sample has been download from Malware Bazaar (password: infected). Algorithm Hash SHA256 hash: ab518a86b77fe842821b50d182b9394d2a59d1c64183a37eb70a6cac100b39f8 SHA3-384 hash:…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →4 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | ab518a86b77fe842821b50d182b9394d2a59d1c64183a37eb70a6cac100b39f8 | Medium | Score 53/100 | First seen |
| SHA256 | 82a73b268dca7cc0678aba4deb06a7b41bd6e17d72927217113992be1eec7546 | Medium | Score 53/100 | First seen |
| MD5 | 97806d455842e36b67fdd2a763f97281 | Medium | Score 53/100 | First seen |
| SHA1 | bd2447a6cfb1812ee7f190c9d92beabcc6976dcb | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…