General
- Target 858920.xlsm
- Size 146KB
- Sample200701-z96dd3e582
- SHA256 24f0f50d0dd94a6dcbef33a6abe2cf3a33a19a8752cd95a7a0a436ff1bcce618
- MD5 fefa86d7b5dfe6bbfee0b67bb76ed055
- SHA1 cac22c01f711503f0c4a097835d0ec8ac8832105
- SHA512 96d46fb9162ee8c9400973539cdb51e04b388938d0e7f25fc725dd705dc59485a36fb5a854420d1ec4cc6584c357f32eccb0cc05c49f519eeae3abdabd190c84
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
858920.xlsm
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
858920.xlsm
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Targets
-
- Target 858920.xlsm
- Size 146KB
- SHA256 24f0f50d0dd94a6dcbef33a6abe2cf3a33a19a8752cd95a7a0a436ff1bcce618
- MD5 fefa86d7b5dfe6bbfee0b67bb76ed055
- SHA1 cac22c01f711503f0c4a097835d0ec8ac8832105
- SHA512 96d46fb9162ee8c9400973539cdb51e04b388938d0e7f25fc725dd705dc59485a36fb5a854420d1ec4cc6584c357f32eccb0cc05c49f519eeae3abdabd190c84
- MD5 SHA1 SHA512
Score8/10-
Executes dropped EXE
-
Process spawned suspicious child process
This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.