General
-
Target
07610eca3a554bbc3279af58afb13d4da4234771cc60b020fac93605a9a8a429.xls
-
Size
106KB
-
Sample
220329-zny81afccn
-
MD5
e51296a26db59c3b953e16f97cefba82
-
SHA1
9b20e34151eb584eca0bceeab76a0cde75bd3dc2
-
SHA256
07610eca3a554bbc3279af58afb13d4da4234771cc60b020fac93605a9a8a429
-
SHA512
cd13887bd34eaea34108b54cf345a50c340e1cfe1953aa3f15433a63d94b66d39ade448e804d392264bb402fc659c2070d5b5b321e8add7bc9eb95b826e0739c
Behavioral task
behavioral1
Sample
07610eca3a554bbc3279af58afb13d4da4234771cc60b020fac93605a9a8a429.xls
Resource
win10-20220223-en
Behavioral task
behavioral2
Sample
07610eca3a554bbc3279af58afb13d4da4234771cc60b020fac93605a9a8a429.xls
Resource
win10-20220223-en
Malware Config
Extracted
http://fccatinsaat.com/wp-content/Cw3aR6792f/
http://fabulouswebdesign.net/invoice/m/
http://freemanylaluz.com/downloads/8dR9pgNBFtz/
https://freewebsitedirectory.com/wp-includes/v2qFAlMZELRkxbz/
http://futaba.youchien.net/wp-content/sSJqJ/
http://dominionai.org/wp-includes/T5qXAR8p5/
Extracted
http://fccatinsaat.com/wp-content/Cw3aR6792f/
http://fabulouswebdesign.net/invoice/m/
http://freemanylaluz.com/downloads/8dR9pgNBFtz/
https://freewebsitedirectory.com/wp-includes/v2qFAlMZELRkxbz/
Targets
-
-
Target
07610eca3a554bbc3279af58afb13d4da4234771cc60b020fac93605a9a8a429.xls
-
Size
106KB
-
MD5
e51296a26db59c3b953e16f97cefba82
-
SHA1
9b20e34151eb584eca0bceeab76a0cde75bd3dc2
-
SHA256
07610eca3a554bbc3279af58afb13d4da4234771cc60b020fac93605a9a8a429
-
SHA512
cd13887bd34eaea34108b54cf345a50c340e1cfe1953aa3f15433a63d94b66d39ade448e804d392264bb402fc659c2070d5b5b321e8add7bc9eb95b826e0739c
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-