General
- Target details 07.14.2020.doc
- Size 113KB
- Sample200715-nagg4ak94e
- SHA256 eba61461d1da64f0276919d253c8eac99c6381abbab51fcf3e61b1df18fdc1d7
- MD5 5d99893bced88bb6a17b2e60d0484429
- SHA1 c099199a809927b03d4517419b28746de8f1ed63
- SHA512 61f11bd304ca6bc384564a298adc8dfa4166bad3ca96f7bd0cefdfcc22223f39bcd4a89c9bbc577abcaf729309748a2aa25c323a468cbf855a5a19d3094d3155
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
details 07.14.2020.doc
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
details 07.14.2020.doc
Resource
win10
0 signatures
0 seconds
Malware Config
Targets
-
- Target details 07.14.2020.doc
- Size 113KB
- SHA256 eba61461d1da64f0276919d253c8eac99c6381abbab51fcf3e61b1df18fdc1d7
- MD5 5d99893bced88bb6a17b2e60d0484429
- SHA1 c099199a809927b03d4517419b28746de8f1ed63
- SHA512 61f11bd304ca6bc384564a298adc8dfa4166bad3ca96f7bd0cefdfcc22223f39bcd4a89c9bbc577abcaf729309748a2aa25c323a468cbf855a5a19d3094d3155
- MD5 SHA1 SHA512
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.