General
-
Target
document-329225670.xls
-
Size
138KB
-
Sample
210312-fm8kxm5han
-
MD5
8ca40e8ffb40bbb82e77b32f513275d8
-
SHA1
cbba0b1b68e56e99036b8fca41d7c2e78ed87cd2
-
SHA256
24c6558f2fb6d51f674db36a608073276fb6d7ae856a6d5d096d4a1dafb9ef1d
-
SHA512
fb653ed5b06bf8a3ca0acef4b3a192da2a360b9dc5cd0a80503edbd87d73b70e80f2979210455b771c196ff9465ccd246042c985e5c8aea0dd3828d80c564172
Behavioral task
behavioral1
Sample
document-329225670.xls
Resource
win7v20201028
Behavioral task
behavioral2
Sample
document-329225670.xls
Resource
win10v20201028
Malware Config
Extracted
http://nvelj12qyyfi03kqxy.xyz/i.gif
Targets
-
-
Target
document-329225670.xls
-
Size
138KB
-
MD5
8ca40e8ffb40bbb82e77b32f513275d8
-
SHA1
cbba0b1b68e56e99036b8fca41d7c2e78ed87cd2
-
SHA256
24c6558f2fb6d51f674db36a608073276fb6d7ae856a6d5d096d4a1dafb9ef1d
-
SHA512
fb653ed5b06bf8a3ca0acef4b3a192da2a360b9dc5cd0a80503edbd87d73b70e80f2979210455b771c196ff9465ccd246042c985e5c8aea0dd3828d80c564172
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-