General
- Target 59136a8738af5783756405f46526e99f705dd94a14dd2629de96880814dacc0c
- Size 549KB
- Sample220122-satb9sbfh8
- SHA256 e037ac8d0cf0abd94a7cd4e4c5c132ef5d398bee90bf71d47692c3804285eee1
- MD5 be901bc931c00a84d423e1e74dc8f0c9
- SHA1 5b2c3f5c96d3c96dec9a5ef2aaedd2a16f89f4c5
- SHA512 6412bc7c95898c724de569e60673b427721361bcfc638a40824b723bbea068c2d363b88118af2ff9d246f8d16db51c7d8675cdcda81bc73eaeffd31bcddc95b4
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
59136a8738af5783756405f46526e99f705dd94a14dd2629de96880814dacc0c.xll
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
59136a8738af5783756405f46526e99f705dd94a14dd2629de96880814dacc0c.xll
Resource
win10-en-20211208
0 signatures
0 seconds
Malware Config
Targets
-
- Target 59136a8738af5783756405f46526e99f705dd94a14dd2629de96880814dacc0c
- Size 1.7MB
- SHA256 59136a8738af5783756405f46526e99f705dd94a14dd2629de96880814dacc0c
- MD5 d9dc8d21d1b662803907276a1c131b2c
- SHA1 ad15b7c845390a2964af34255cf50db8c1c98a8e
- SHA512 680afcc6bd570457b5c146fb9812dbcdf07fc1990c928f5152ac509203accbc8c7e0c194bdd221ac1c01cd63a813218e5b003597293a5e8ddef0fe73a1daca1b
- MD5 SHA1 SHA512
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Bazar/Team9 Loader payload
-
Loads dropped DLL