General
-
Target
Csaz68MU_fiUPkX.zip
-
Size
252KB
-
Sample
211118-zbf7naaeg5
-
MD5
ac3f30a708bfbed9cb1fba429d29abc7
-
SHA1
713f2f69364b5de804cc6df81e8c78bacff7fa22
-
SHA256
5ff1291cefd1f8ca597ff656f5b4785ea8ac6a42d31048d8ab3286811bd42e44
-
SHA512
91d2eee39a93c8da3db101e6064ae1e92dcb666f50b5ca29cbc98733f34083936fb183d580a83211eefda303c657e48a36695da6bcb71969032dceb22f70c7ae
Behavioral task
behavioral1
Sample
F.A.Q[2021.11.17_21-03].xlsb
Resource
win7-en-20211014
Behavioral task
behavioral2
Sample
F.A.Q[2021.11.17_21-03].xlsb
Resource
win10-en-20211104
Malware Config
Extracted
https://yfo.yag.mybluehost.me/wp-content/uploads/2020/08/file1.cms
Extracted
icedid
4258209311
sauceson.ink
Targets
-
-
Target
F.A.Q[2021.11.17_21-03].xlsb
-
Size
283KB
-
MD5
33131357d897aa065d8220fd159733d4
-
SHA1
7c5793ad1dcd2594c803c991f6ce0ef4a75e78d8
-
SHA256
947a442e30a4a5bf3b19a691ae7198b3bbe2517bbf101e7820a16af9f69287fe
-
SHA512
fc63cce9a3a3c4cdcd5354f3d82882fc948e1cfd7622ce79c0222420c0b0d5ee87bec3b78e109dbca4f50a74e41d96bc34474237291992fb507c1f51b83d9894
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Loads dropped DLL
-