General
- Target scanned copy.xll
- Size 571KB
- Sample220215-cpk2facbcj
- SHA256 30980176792fc176767dfd338ef7fd0b73f04b66cd63e1e3b0bbf485bc064ed4
- MD5 e3ba01211662f2a72b070ed82ba70dab
- SHA1 487544a52db678bb99208df6c7a1bbbfd28caa31
- SHA512 6325b61b773293c9247cca84c1d448f7e07e6b0b717143d46bf373073e2994555f1b2c323f6743cfd451a3c786cef6c85b8fed1addf9e600041dc5561203c101
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
scanned copy.xll
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
scanned copy.xll
Resource
win10v2004-en-20220112
0 signatures
0 seconds
Malware Config
Extracted
Language
-
xlm4.0
Source
Targets
-
- Target scanned copy.xll
- Size 571KB
- SHA256 30980176792fc176767dfd338ef7fd0b73f04b66cd63e1e3b0bbf485bc064ed4
- MD5 e3ba01211662f2a72b070ed82ba70dab
- SHA1 487544a52db678bb99208df6c7a1bbbfd28caa31
- SHA512 6325b61b773293c9247cca84c1d448f7e07e6b0b717143d46bf373073e2994555f1b2c323f6743cfd451a3c786cef6c85b8fed1addf9e600041dc5561203c101
- MD5 SHA1 SHA512
Score10/10-
suricata: ET MALWARE EXE Download Request To Wordpress Folder Likely Malicious
suricata: ET MALWARE EXE Download Request To Wordpress Folder Likely Malicious
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL