General
-
Target
c0d0fd5f07516d25ab2a3a4b0b797a306afbb9b64e5e942b7df578ea43ee0677.xls
-
Size
95KB
-
Sample
220707-dg185aedd4
-
MD5
903505c389b0771e9f99ccc1f29117c4
-
SHA1
5f5800091cb786fbb043945c7d7972b428c5f10a
-
SHA256
c0d0fd5f07516d25ab2a3a4b0b797a306afbb9b64e5e942b7df578ea43ee0677
-
SHA512
9f6c8aa8d99a4961bcd4fe994240b48c99c54c86dbb4f3a51ae2ecafed65c839d17d469d8d5568fe41b211e8ea626cacb1bed73066e8b97ba79b01ff8fd4cfe7
Behavioral task
behavioral1
Sample
c0d0fd5f07516d25ab2a3a4b0b797a306afbb9b64e5e942b7df578ea43ee0677.xls
Resource
win10-20220414-en
Behavioral task
behavioral2
Sample
c0d0fd5f07516d25ab2a3a4b0b797a306afbb9b64e5e942b7df578ea43ee0677.xls
Resource
win10-20220414-en
Malware Config
Extracted
http://www.sunflowerlaboratory.in/fonts/79Tq62ly/
http://dirigent.co.uk/vardagsekonomi/iC36jJ4J1cf/
http://agtrade.hu/images/kiQYmOs2tSKq/
https://www.zachboyle.com/wp-admin/EA470ZrTGNkuA/
Targets
-
-
Target
c0d0fd5f07516d25ab2a3a4b0b797a306afbb9b64e5e942b7df578ea43ee0677.xls
-
Size
95KB
-
MD5
903505c389b0771e9f99ccc1f29117c4
-
SHA1
5f5800091cb786fbb043945c7d7972b428c5f10a
-
SHA256
c0d0fd5f07516d25ab2a3a4b0b797a306afbb9b64e5e942b7df578ea43ee0677
-
SHA512
9f6c8aa8d99a4961bcd4fe994240b48c99c54c86dbb4f3a51ae2ecafed65c839d17d469d8d5568fe41b211e8ea626cacb1bed73066e8b97ba79b01ff8fd4cfe7
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-