General
-
Target
Bill_PYWTF0.xlsb
-
Size
264KB
-
Sample
211014-spccasafhl
-
MD5
29be144375ee1609c2c1fd63ae2ff514
-
SHA1
f37a8d5da9424bd916ed1c572b15173b5f430dd2
-
SHA256
1296ca015baa3dfae62d8cd6f6c1c1513fb919201a6c11f3df1474700d57fb26
-
SHA512
7873fffbc179dc3e8b415b72c2c3b736c7f4164e1a8a33c6d38cae5902466059f2fe50adf9ff0f2bba8411d373ceca02a950df9fd263624ab03014cf9879d752
Behavioral task
behavioral1
Sample
Bill_PYWTF0.xlsb
Resource
win7-en-20210920
Behavioral task
behavioral2
Sample
Bill_PYWTF0.xlsb
Resource
win11
Behavioral task
behavioral3
Sample
Bill_PYWTF0.xlsb
Resource
win10-en-20210920
Behavioral task
behavioral4
Sample
Bill_PYWTF0.xlsb
Resource
win10-en-20210920
Malware Config
Targets
-
-
Target
Bill_PYWTF0.xlsb
-
Size
264KB
-
MD5
29be144375ee1609c2c1fd63ae2ff514
-
SHA1
f37a8d5da9424bd916ed1c572b15173b5f430dd2
-
SHA256
1296ca015baa3dfae62d8cd6f6c1c1513fb919201a6c11f3df1474700d57fb26
-
SHA512
7873fffbc179dc3e8b415b72c2c3b736c7f4164e1a8a33c6d38cae5902466059f2fe50adf9ff0f2bba8411d373ceca02a950df9fd263624ab03014cf9879d752
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-