General
-
Target
files.05.05.2021.doc
-
Size
79KB
-
Sample
210505-12vk8qm6we
-
MD5
692f5b14f1c7fabe5be8a66ae0ad54d7
-
SHA1
c91da01dba26e5e8669f285a52b02fa98ebeeafa
-
SHA256
c3f8e624a68214a955c647a177e44048e7c829cbf928347aa042b4999e3e1b86
-
SHA512
985b8a22966ad599af72fd0d844182484b9ce257ac6a5ffed3d0adb3bc229edaacf94a1fcfdb9b1e0839957c7899e06def6d1c3e5ac0da231f8c6642bba54520
Static task
static1
Behavioral task
behavioral1
Sample
files.05.05.2021.doc
Resource
win7v20210408
Behavioral task
behavioral2
Sample
files.05.05.2021.doc
Resource
win10v20210410
Malware Config
Extracted
icedid
1386562008
zasertiokil.top
Targets
-
-
Target
files.05.05.2021.doc
-
Size
79KB
-
MD5
692f5b14f1c7fabe5be8a66ae0ad54d7
-
SHA1
c91da01dba26e5e8669f285a52b02fa98ebeeafa
-
SHA256
c3f8e624a68214a955c647a177e44048e7c829cbf928347aa042b4999e3e1b86
-
SHA512
985b8a22966ad599af72fd0d844182484b9ce257ac6a5ffed3d0adb3bc229edaacf94a1fcfdb9b1e0839957c7899e06def6d1c3e5ac0da231f8c6642bba54520
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Suspicious use of NtCreateProcessExOtherParentProcess
-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Loads dropped DLL
-