General
-
Target
a9b18dbfc7d7336f3841873719da1dfeab8ec6cd02cad909363ec69464306c92.xls
-
Size
95KB
-
Sample
220707-dlgqaaccbm
-
MD5
921fd66840d3ca5eba86718ad5bdda46
-
SHA1
bb9945be397318d4e6a859d7665ea5b052eac6c2
-
SHA256
a9b18dbfc7d7336f3841873719da1dfeab8ec6cd02cad909363ec69464306c92
-
SHA512
031c5d940552bbb114dd71649f777c4c402052334a16a7073f80be5f94326a8898624c72d4e7a5c4f3e163c4705358a41bce56d979d1b04366a8e93fc018a4e8
Behavioral task
behavioral1
Sample
a9b18dbfc7d7336f3841873719da1dfeab8ec6cd02cad909363ec69464306c92.xls
Resource
win10-20220414-en
Behavioral task
behavioral2
Sample
a9b18dbfc7d7336f3841873719da1dfeab8ec6cd02cad909363ec69464306c92.xls
Resource
win10-20220414-en
Malware Config
Extracted
https://edoraseguros.com.br/cgi-bin/jQNq9wlH1GXU/
http://earthmach.co.za/libraries/tWkZh9YrXbTd6IeX/
http://finvest.rs/wp-admin/Hr9nVNTIHgw59S/
http://efverstedt.se/5jjaV/w7fLEHJ20xn0qD/
Extracted
https://edoraseguros.com.br/cgi-bin/jQNq9wlH1GXU/
Targets
-
-
Target
a9b18dbfc7d7336f3841873719da1dfeab8ec6cd02cad909363ec69464306c92.xls
-
Size
95KB
-
MD5
921fd66840d3ca5eba86718ad5bdda46
-
SHA1
bb9945be397318d4e6a859d7665ea5b052eac6c2
-
SHA256
a9b18dbfc7d7336f3841873719da1dfeab8ec6cd02cad909363ec69464306c92
-
SHA512
031c5d940552bbb114dd71649f777c4c402052334a16a7073f80be5f94326a8898624c72d4e7a5c4f3e163c4705358a41bce56d979d1b04366a8e93fc018a4e8
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-