General
- Target printouts of outstanding as of Jan_27_2021.xlsm
- Size 57KB
- Sample210127-s8s62gmxma
- SHA256 bd0a70575336c7c295d763de9b56f4c7f4e5a8cccf7dc65798fc0dab71d129d0
- MD5 db3d5929c4a2d0bb150b60f09a2aa120
- SHA1 4090d6e7e53645df72ac2f844e1030c1e8d9eda5
- SHA512 5572577909a23bea2894f2d761668581600cb54274106f813827a6170232d89c5bdb18d270ab04308e5421815d95a1eb42668493ee2c959a195f2ae4997c95a8
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
printouts of outstanding as of Jan_27_2021.xlsm
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Language
-
xlm4.0
Source
Extracted
Family
-
dridex
Botnet
-
10444
C2
-
193.90.12.20:443
-
185.181.9.76:5037
-
175.207.13.56:5353
-
212.129.24.84:5037
rc4.plain
rc4.plain
Targets
-
- Target printouts of outstanding as of Jan_27_2021.xlsm
- Size 57KB
- SHA256 bd0a70575336c7c295d763de9b56f4c7f4e5a8cccf7dc65798fc0dab71d129d0
- MD5 db3d5929c4a2d0bb150b60f09a2aa120
- SHA1 4090d6e7e53645df72ac2f844e1030c1e8d9eda5
- SHA512 5572577909a23bea2894f2d761668581600cb54274106f813827a6170232d89c5bdb18d270ab04308e5421815d95a1eb42668493ee2c959a195f2ae4997c95a8
- MD5 SHA1 SHA512
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Loads dropped DLL