Extracted

• • Target

    詳細情報/詳細情報.xlsb

  • Size

    317KB

  • MD5

    169685039016891f5442292ad95e51c9

  • SHA1

    a2db74f9ab457c403e238cb2410848447f89548e

  • SHA256

    7d1ff39fc6daab153ad6477554415336578256257aa81fd796a48b89c7a8b2e8

  • SHA512

    7c990325b11c661fb3acd7a0f8ed312844b190d3211c2468aa7854271717c9ad96c77dd5e9fcf7042a2e5ce6001d7a6a4edc48265e052d93e128334de4e0e905

  Score

  10^/10

  nloaderloaderupx

  • Nloader

    Simple loader that includes the keyword 'cambo' in the URL used to download other families.

    loadernloader

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • ACProtect 1.3x - 1.4x DLL software

    Detects file using ACProtect software.

  • Nloader Payload

  • Blocklisted process makes network request

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Loads dropped DLL

  behavioral1behavioral2