General
- Target SecuriteInfo.com.DOC.Kryptik.Q.32009
- Size 303KB
- Sample200713-py5g62tshj
- SHA256 8184e75ac4a219a21ffdff427a7998cdf21e08d87fc8df1d995df4a4e37177fe
- MD5 033af2427f2f0cf35b653848a9c2b89c
- SHA1 e87a09dbb76821faa1cd222ab125219b2185f7b4
- SHA512 c60f8a513ac3fea9fdb69ba4ed7f4789f4675d8e761bd6254a7b4cea497b8ad4f1ad2763ffd2a0796a084f3a44b3171f018c32f6d8675dc99b0c37faa44f6fde
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.DOC.Kryptik.Q.32009.xls
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.DOC.Kryptik.Q.32009.xls
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.DOC.Kryptik.Q.32009
- Size 303KB
- SHA256 8184e75ac4a219a21ffdff427a7998cdf21e08d87fc8df1d995df4a4e37177fe
- MD5 033af2427f2f0cf35b653848a9c2b89c
- SHA1 e87a09dbb76821faa1cd222ab125219b2185f7b4
- SHA512 c60f8a513ac3fea9fdb69ba4ed7f4789f4675d8e761bd6254a7b4cea497b8ad4f1ad2763ffd2a0796a084f3a44b3171f018c32f6d8675dc99b0c37faa44f6fde
- MD5 SHA1 SHA512
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Enumerates connected drives
-
Process spawned suspicious child process
This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.