General
- Target SecuriteInfo.com.DOC.Kryptik.Q.29060
- Size 310KB
- Sample200713-fb5zzphqca
- SHA256 7136f9eb2fe7ca09e0140f78c1d98cbb80acd7593793d2803106e1bed432a797
- MD5 de19fa61e71f77153040f1b239d6c501
- SHA1 73e9424f1ff64428bfc512ec4e2f9dc99300ec96
- SHA512 506d4782c20f7767bd52fd927fe9cd5cc6e7238dbc1619145e2ec7baf1dac6d1699c98837e3b5980e7ed82ecc4249c741b8d11036fa7ff215dfd8f22b7c6c2be
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.DOC.Kryptik.Q.29060.xls
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.DOC.Kryptik.Q.29060.xls
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.DOC.Kryptik.Q.29060
- Size 310KB
- SHA256 7136f9eb2fe7ca09e0140f78c1d98cbb80acd7593793d2803106e1bed432a797
- MD5 de19fa61e71f77153040f1b239d6c501
- SHA1 73e9424f1ff64428bfc512ec4e2f9dc99300ec96
- SHA512 506d4782c20f7767bd52fd927fe9cd5cc6e7238dbc1619145e2ec7baf1dac6d1699c98837e3b5980e7ed82ecc4249c741b8d11036fa7ff215dfd8f22b7c6c2be
- MD5 SHA1 SHA512
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Enumerates connected drives
-
Process spawned suspicious child process
This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.