General
-
Target
File_0008656.xls
-
Size
341KB
-
Sample
200715-49ehqpzr6a
-
MD5
26452ff471bf557d0e6d01a6d65517b5
-
SHA1
c5f89cecc9b9a7baeff94c922b21afa30e7836b7
-
SHA256
a72d63cc39282fc2f056979dcbfa503a57359946f8f527cc7615938fd21ca73a
-
SHA512
f7aff1fda98dbebe99dd867498dcb8f95eb9314541794e1b3a15210c7f10c5edb23e1ed727020a527dc816cfd3e0cbac64e3c3259f960007f1ecfbe7905a46ef
Malware Config
Targets
-
-
Target
File_0008656.xls
-
Size
341KB
-
MD5
26452ff471bf557d0e6d01a6d65517b5
-
SHA1
c5f89cecc9b9a7baeff94c922b21afa30e7836b7
-
SHA256
a72d63cc39282fc2f056979dcbfa503a57359946f8f527cc7615938fd21ca73a
-
SHA512
f7aff1fda98dbebe99dd867498dcb8f95eb9314541794e1b3a15210c7f10c5edb23e1ed727020a527dc816cfd3e0cbac64e3c3259f960007f1ecfbe7905a46ef
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Enumerates connected drives
-
Process spawned suspicious child process
This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.
-