General
- Target inquiry_07.20.doc
- Size 115KB
- Sample200715-ljbskc4dg2
- SHA256 d885d083270df417a78eef7ed4d5d45111ee20e942db3500a2c48699cf8107eb
- MD5 2fbb6f7b5f1b9a23a44a73cac1632df6
- SHA1 f759f2d4f1f46a77af23d28b2382fd359403bef9
- SHA512 96fb3764bb938d0ab5a39fecdb31860df7d5d09de366fbe56e851e978b0a8372df67e50c21c42c5a71068e21942335b8545db4d968435f362edbebc75c4e581a
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
inquiry_07.20.doc
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
inquiry_07.20.doc
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target inquiry_07.20.doc
- Size 115KB
- SHA256 d885d083270df417a78eef7ed4d5d45111ee20e942db3500a2c48699cf8107eb
- MD5 2fbb6f7b5f1b9a23a44a73cac1632df6
- SHA1 f759f2d4f1f46a77af23d28b2382fd359403bef9
- SHA512 96fb3764bb938d0ab5a39fecdb31860df7d5d09de366fbe56e851e978b0a8372df67e50c21c42c5a71068e21942335b8545db4d968435f362edbebc75c4e581a
- MD5 SHA1 SHA512
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.