General
- Target fax_3123.xls
- Size 144KB
- Sample200708-l22cfhenz6
- SHA256 1615c46ae8e9b2f243ed4e124edffeea4cd452fd5a2ad92b496260e1c963ae86
- MD5 ae6cec0d6053f9dc4f6f93a5615001fc
- SHA1 34639c2f8d2933f7cef1a99b5f3d8996d718e941
- SHA512 a83dd1e7b04f7f6d0528982200a31b21dd78cfff0a143d189be2aa0044f41d0e1d75ce4ef9ca2b6442ebbd407a9571be005ebc8518d391dfc2963227028007a4
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
fax_3123.xls
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
fax_3123.xls
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Targets
-
- Target fax_3123.xls
- Size 144KB
- SHA256 1615c46ae8e9b2f243ed4e124edffeea4cd452fd5a2ad92b496260e1c963ae86
- MD5 ae6cec0d6053f9dc4f6f93a5615001fc
- SHA1 34639c2f8d2933f7cef1a99b5f3d8996d718e941
- SHA512 a83dd1e7b04f7f6d0528982200a31b21dd78cfff0a143d189be2aa0044f41d0e1d75ce4ef9ca2b6442ebbd407a9571be005ebc8518d391dfc2963227028007a4
- MD5 SHA1 SHA512
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.