General
- Target 56d8a969497fe0cf90aa6e71c8f7c1a2e76b621d0b18876db8e3ca198a7b4350
- Size 549KB
- Sample220128-lbhtlaadhp
- SHA256 2ecfc8a844105c2ccc181ddc4f8b66ea715071dc16e8fb18402085c132725a96
- MD5 6e9d5644991c39be80f75820544b016b
- SHA1 d71fd7837630e2696afd21534ca66264540e0c06
- SHA512 59bd48879e3f04a5b47f3fc42de4c3814c7f9aa215ecd16fa7f8a48747ef862cf7dbb7998645d101cd985595e37efe68bae96bf338d772495a2e6f7cab4a3f56
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
56d8a969497fe0cf90aa6e71c8f7c1a2e76b621d0b18876db8e3ca198a7b4350.xll
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
56d8a969497fe0cf90aa6e71c8f7c1a2e76b621d0b18876db8e3ca198a7b4350.xll
Resource
win10-en-20211208
0 signatures
0 seconds
Malware Config
Targets
-
- Target 56d8a969497fe0cf90aa6e71c8f7c1a2e76b621d0b18876db8e3ca198a7b4350
- Size 1.7MB
- SHA256 56d8a969497fe0cf90aa6e71c8f7c1a2e76b621d0b18876db8e3ca198a7b4350
- MD5 f198da6e1ffc5c8e76e126412f6a0fe8
- SHA1 e3f2a10f79f2b07e2a80c5d218e15cc1ae3b9a8e
- SHA512 e72f270c1b75748fc04201bb774eec09fdf6113f6e41f83a4a0dba55e253fd50a7579fae8ed38eb01fd1072980455373d1fb2413d4e84449b22d569e1fe991e5
- MD5 SHA1 SHA512
Score10/10Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
Bazar/Team9 Loader payload
Loads dropped DLL