General
-
Target
Complaint-Letter-1839904529-03102021.xls
-
Size
276KB
-
Sample
210310-kkh266fnla
-
MD5
d1b22a745d5efffef5c52928b7f439d6
-
SHA1
ba3a1a876978ebdb2a631f644a6b686fafc3c7a3
-
SHA256
4ce84c7097fafe010daa73dda77ff17662086505e23b8d4bd11692c9d47896df
-
SHA512
0cd10c652a13d1c73da064896e145a7fcc8773cad9e098678bfbe9be7543a81e7b616cd74826d78ebd36ec5842bd27c580c15d5a36109209a26402716a9242ff
Malware Config
Extracted
http://lackenbauer.ru/bd/hhvqjrec/44265.6933299768.dat
http://www.peacezoneacademy.com/dxsbonlv/44265.6933299768.dat
http://jopo.com/gmaaxbro/44265.6933299768.dat
http://www.thegivingwall.co.uk/jfgolx/44265.6933299768.dat
http://baxtercode.com/qkhpnucmzts/44265.6933299768.dat
Targets
-
-
Target
Complaint-Letter-1839904529-03102021.xls
-
Size
276KB
-
MD5
d1b22a745d5efffef5c52928b7f439d6
-
SHA1
ba3a1a876978ebdb2a631f644a6b686fafc3c7a3
-
SHA256
4ce84c7097fafe010daa73dda77ff17662086505e23b8d4bd11692c9d47896df
-
SHA512
0cd10c652a13d1c73da064896e145a7fcc8773cad9e098678bfbe9be7543a81e7b616cd74826d78ebd36ec5842bd27c580c15d5a36109209a26402716a9242ff
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-