General
- Target input_07.14.2020.doc
- Size 114KB
- Sample200715-qctllfh2w6
- SHA256 bdda92c5990ded4fd7ef2c4acfa840c0c94d2d56979b99aa4c6284f33cd9d87c
- MD5 56781aaf302e5efb3b655384215daabb
- SHA1 3917c7f5b526eca00087f051b452c7dda60550fa
- SHA512 ba3b1d703e314ff11e496a268f71b08348b179f35c274847136375afb04df2fc97d9ac2591b41b8919f999228d41dc78781bb411005d780f28adaf931f94743f
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
input_07.14.2020.doc
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
input_07.14.2020.doc
Resource
win10v200430
0 signatures
0 seconds
Malware Config
Targets
-
- Target input_07.14.2020.doc
- Size 114KB
- SHA256 bdda92c5990ded4fd7ef2c4acfa840c0c94d2d56979b99aa4c6284f33cd9d87c
- MD5 56781aaf302e5efb3b655384215daabb
- SHA1 3917c7f5b526eca00087f051b452c7dda60550fa
- SHA512 ba3b1d703e314ff11e496a268f71b08348b179f35c274847136375afb04df2fc97d9ac2591b41b8919f999228d41dc78781bb411005d780f28adaf931f94743f
- MD5 SHA1 SHA512
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.