General
-
Target
operazione_1751.xlsb
-
Size
122KB
-
Sample
210716-pe1c1fct6e
-
MD5
f41e29e685872c54729e8d7596923455
-
SHA1
0d71123ad3227651b93b7b3a5e55ae2395b24faa
-
SHA256
b02d88044c50d694ea29d04d23729aeaf7d38ca8a4da0f502797068d3951d5d7
-
SHA512
32dae638d7ae79cd2c0c6712e4342c0d4098d09bd38fedc190913b3aca1b7530fdf4b819590baeab7a0e7e66ce6de29b651803de8d04500d0ba3fd38aff85a2b
Behavioral task
behavioral1
Sample
operazione_1751.xlsb
Resource
win7v20210410
Behavioral task
behavioral2
Sample
operazione_1751.xlsb
Resource
win10v20210408
Malware Config
Extracted
http://trimestre.bar/signin.jpg
Targets
-
-
Target
operazione_1751.xlsb
-
Size
122KB
-
MD5
f41e29e685872c54729e8d7596923455
-
SHA1
0d71123ad3227651b93b7b3a5e55ae2395b24faa
-
SHA256
b02d88044c50d694ea29d04d23729aeaf7d38ca8a4da0f502797068d3951d5d7
-
SHA512
32dae638d7ae79cd2c0c6712e4342c0d4098d09bd38fedc190913b3aca1b7530fdf4b819590baeab7a0e7e66ce6de29b651803de8d04500d0ba3fd38aff85a2b
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-