General
-
Target
Overdue-Debt-1869073547-03042021.xls
-
Size
76KB
-
Sample
210305-kwzv1sdy52
-
MD5
5ce3d485868eca374c50b204acf4cba3
-
SHA1
8ec156b7865808e66d500fe2aeffccd6ddd144c9
-
SHA256
6603c3cc6d507fc89e59426b60d1c1045f9631b478103160aa6831eb7ab15d39
-
SHA512
ac655b94b5203f343e7ed5f8882508c278f18e7fc990124d5fc1c92daaab1bedff5e293a640e2a1037e7a5408e3b0bd7198602641f575876b4c58b3e83a801ad
Malware Config
Extracted
http://goscrawny.com/kfjzyxi/44260.4061826389.jpg
http://cooperationoffense.com/vitaotme/44260.4061826389.jpg
http://goaqaba.com/ccwidd/44260.4061826389.jpg
http://virtuebeauty.org/srquxjdyy/44260.4061826389.jpg
http://calfgiant.com/swsejhakai/44260.4061826389.jpg
Targets
-
-
Target
Overdue-Debt-1869073547-03042021.xls
-
Size
76KB
-
MD5
5ce3d485868eca374c50b204acf4cba3
-
SHA1
8ec156b7865808e66d500fe2aeffccd6ddd144c9
-
SHA256
6603c3cc6d507fc89e59426b60d1c1045f9631b478103160aa6831eb7ab15d39
-
SHA512
ac655b94b5203f343e7ed5f8882508c278f18e7fc990124d5fc1c92daaab1bedff5e293a640e2a1037e7a5408e3b0bd7198602641f575876b4c58b3e83a801ad
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-