General
-
Target
Overdue-Debt-1085351754-03042021.xls
-
Size
76KB
-
Sample
210304-g2efmbdrcj
-
MD5
fbc2558287adf23b5f7d32851709f29b
-
SHA1
d8cac6413b9be9d8df57e7e14fde6d9ebe2a4daf
-
SHA256
b3ff5ffeb8b96468104c9d2ce682349ece6032dc791f69fc2ce9af0f731843b9
-
SHA512
7abb408af85e95bac9ee3d36fc5d9d7ba9772138ff0b5619cbcbf5758859dcb7af1b2022baf6cef387d1ae4731af27d7b647a14250a6046ee1ce7aea6f9d8433
Malware Config
Extracted
http://goscrawny.com/kfjzyxi/44259.8181746528.jpg
http://cooperationoffense.com/vitaotme/44259.8181746528.jpg
http://goaqaba.com/ccwidd/44259.8181746528.jpg
http://virtuebeauty.org/srquxjdyy/44259.8181746528.jpg
http://calfgiant.com/swsejhakai/44259.8181746528.jpg
Targets
-
-
Target
Overdue-Debt-1085351754-03042021.xls
-
Size
76KB
-
MD5
fbc2558287adf23b5f7d32851709f29b
-
SHA1
d8cac6413b9be9d8df57e7e14fde6d9ebe2a4daf
-
SHA256
b3ff5ffeb8b96468104c9d2ce682349ece6032dc791f69fc2ce9af0f731843b9
-
SHA512
7abb408af85e95bac9ee3d36fc5d9d7ba9772138ff0b5619cbcbf5758859dcb7af1b2022baf6cef387d1ae4731af27d7b647a14250a6046ee1ce7aea6f9d8433
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-