General
- Target 12072020_586621_2778869.xlsm
- Size 44KB
- Sample211228-lt2dnadfg2
- SHA256 f4c15b1eee06d45fa6115ddcfeb24bdacf54570352e0cb713e1c5895089dae1d
Score
10/10
Malware Config
Extracted
Language
-
vba
URLs
-
vba.dropper
https://areeba.eci7.com/vy9p4l9.rar
-
vba.dropper
https://rickyg.co.uk/qsmpbl.zip
-
vba.dropper
https://sortl.in/stdvqdtwy.zip
-
vba.dropper
https://codei10.com/u0q9mfmnr.rar
-
vba.dropper
https://accounts.mytaphouse.com/gclee4.zip
-
vba.dropper
https://cursosuaslp.com/ae824x.zip
-
vba.dropper
https://mymilld.com/ey9zfztry.rar
-
vba.dropper
https://akbuildersdelhi.com/iknk4n0.zip
-
vba.dropper
https://maisondalbon.com/h8w1s9p5.zip
-
vba.dropper
https://partnerinyourprogress.com/fc5y76c.rar
Extracted
Language
-
xlm4.0
Source
URLs
-
xlm40.dropper
https://accounts.mytaphouse.com/gclee4.zip
Extracted
Language
-
xlm4.0
Source
URLs
-
xlm40.dropper
https://cursosuaslp.com/ae824x.zip
Targets
-
- Target 12072020_586621_2778869.xlsm
- Size 44KB
- SHA256 f4c15b1eee06d45fa6115ddcfeb24bdacf54570352e0cb713e1c5895089dae1d
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Process spawned suspicious child process
This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.