General
-
Target
a.doc
-
Size
651KB
-
Sample
220807-wvhcaagfg5
-
MD5
47a572cfa0304c7c0a71f5396de8c7cf
-
SHA1
894a7ffe486097e189429096367aa4ec7fd614e4
-
SHA256
be2b97e18846f3228e269d50aaf9ebe19957e5dab7b452b5f8072e0dc916fe7b
-
SHA512
f1ebc11aff3f96e73db0daac04a7c5a3bc71274790ab9d2d8d536f30e13c39ff83ffab4b7b81b6a3950c31594824abebb14b1f884f0d6f243f4a4a30da19eded
Behavioral task
behavioral1
Sample
a.doc
Resource
win10-20220718-en
Malware Config
Targets
-
-
Target
a.doc
-
Size
651KB
-
MD5
47a572cfa0304c7c0a71f5396de8c7cf
-
SHA1
894a7ffe486097e189429096367aa4ec7fd614e4
-
SHA256
be2b97e18846f3228e269d50aaf9ebe19957e5dab7b452b5f8072e0dc916fe7b
-
SHA512
f1ebc11aff3f96e73db0daac04a7c5a3bc71274790ab9d2d8d536f30e13c39ff83ffab4b7b81b6a3950c31594824abebb14b1f884f0d6f243f4a4a30da19eded
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Process spawned suspicious child process
This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.
-