General
- Target 3762.xlsm
- Size 131KB
- Sample211201-3gkc2scab9
- SHA256 dd589bbbfcec22650ed4aeb33606b6d9ee4b2afdce6cb2e22435f34348714f81
- MD5 db35212aa7fbb90f60c862a82fc4f34c
- SHA1 9167a3c7816d6cba5335c74da2fc2c786b9c131e
- SHA512 1e507da789e0cd52ee1ccbe2cdf0f8bdf14e9fe312d4f4960176f4d0a85c567ad7c0ee30bd3c3a9aff50412e3a99d2d51b9fb8b77ae6ab24bfc4c75861c55e01
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
3762.xlsm
Resource
win7-en-20211104
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
3762.xlsm
Resource
win10-en-20211014
0 signatures
0 seconds
Malware Config
Targets
-
- Target 3762.xlsm
- Size 131KB
- SHA256 dd589bbbfcec22650ed4aeb33606b6d9ee4b2afdce6cb2e22435f34348714f81
- MD5 db35212aa7fbb90f60c862a82fc4f34c
- SHA1 9167a3c7816d6cba5335c74da2fc2c786b9c131e
- SHA512 1e507da789e0cd52ee1ccbe2cdf0f8bdf14e9fe312d4f4960176f4d0a85c567ad7c0ee30bd3c3a9aff50412e3a99d2d51b9fb8b77ae6ab24bfc4c75861c55e01
- MD5 SHA1 SHA512
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request