General
- Target SecuriteInfo.com.DOC.Kryptik.Q.19994
- Size 292KB
- Sample200713-vblmr6jyxa
- SHA256 de8f0c10345af57a06a9f5a64f7fe2916e96b02f16c6bbb10fbc11325eebc3f8
- MD5 c57ccc71cc25b2bfd3068264e639f94f
- SHA1 2712b0cef74d9e365cab0b3074f90b6333245105
- SHA512 5341399a37894e6a3d36a824fa5109bb8026b32e25c49764c4e0d578607f800043aa1508cd8bcaea4f308c019f0f7a34e039e54a9ac7b58420518f4ef366bbb3
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.DOC.Kryptik.Q.19994.xls
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.DOC.Kryptik.Q.19994.xls
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.DOC.Kryptik.Q.19994
- Size 292KB
- SHA256 de8f0c10345af57a06a9f5a64f7fe2916e96b02f16c6bbb10fbc11325eebc3f8
- MD5 c57ccc71cc25b2bfd3068264e639f94f
- SHA1 2712b0cef74d9e365cab0b3074f90b6333245105
- SHA512 5341399a37894e6a3d36a824fa5109bb8026b32e25c49764c4e0d578607f800043aa1508cd8bcaea4f308c019f0f7a34e039e54a9ac7b58420518f4ef366bbb3
- MD5 SHA1 SHA512
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Enumerates connected drives
-
Process spawned suspicious child process
This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.