General
-
Target
PO#986458-78.xlsm
-
Size
234KB
-
Sample
211025-g68ahsgfbr
-
MD5
6ac927240b12d9e2cc72d7fe2fcffab2
-
SHA1
d7b99afcbaef9a53afc73483bb1c8066a01dbb3c
-
SHA256
0fefc72487617dc585a8bdbb89272ef06ebf7ab80d4e42bceb65d80407a22301
-
SHA512
f7ea0934645e1d3684d42736fbaccdddfbe93c54173f136e5703b33bc3342b942c253ec17cebb90130be889ef08e2dfc6e70424159028e7d0ef359980912a5be
Static task
static1
Behavioral task
behavioral1
Sample
PO#986458-78.xlsm
Resource
win7-en-20210920
Behavioral task
behavioral2
Sample
PO#986458-78.xlsm
Resource
win10-en-20210920
Malware Config
Targets
-
-
Target
PO#986458-78.xlsm
-
Size
234KB
-
MD5
6ac927240b12d9e2cc72d7fe2fcffab2
-
SHA1
d7b99afcbaef9a53afc73483bb1c8066a01dbb3c
-
SHA256
0fefc72487617dc585a8bdbb89272ef06ebf7ab80d4e42bceb65d80407a22301
-
SHA512
f7ea0934645e1d3684d42736fbaccdddfbe93c54173f136e5703b33bc3342b942c253ec17cebb90130be889ef08e2dfc6e70424159028e7d0ef359980912a5be
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Deletes itself
-