General
-
Target
modal_2276.xlsb
-
Size
66KB
-
Sample
210316-c477gqn84j
-
MD5
d73a7db9f19b66c09e831dc8b9de6e8a
-
SHA1
74532462f7debc64ec2bd9da5dfee6514db60309
-
SHA256
6902a1d34acdc62f6f9b0722852c9fd4a0ec8d05d9ccd936257d7a0224e7c3e4
-
SHA512
7a87ae3e33e88c15d1e17eb629f5703f73ebb1bd73478ce121911382b356b8feea01a7ae9b46b028d396174cd991154fcfa4fb3f143d51163484c4a1dc6e7f3d
Behavioral task
behavioral1
Sample
modal_2276.xlsb
Resource
win7v20201028
Behavioral task
behavioral2
Sample
modal_2276.xlsb
Resource
win10v20201028
Malware Config
Extracted
http://trimestre.casa/register.jpg
Targets
-
-
Target
modal_2276.xlsb
-
Size
66KB
-
MD5
d73a7db9f19b66c09e831dc8b9de6e8a
-
SHA1
74532462f7debc64ec2bd9da5dfee6514db60309
-
SHA256
6902a1d34acdc62f6f9b0722852c9fd4a0ec8d05d9ccd936257d7a0224e7c3e4
-
SHA512
7a87ae3e33e88c15d1e17eb629f5703f73ebb1bd73478ce121911382b356b8feea01a7ae9b46b028d396174cd991154fcfa4fb3f143d51163484c4a1dc6e7f3d
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-