General
-
Target
52b575d356d01ed7ee3bac6f661a15445b25114ede3b17abd84c5f23ffdd7f7e
-
Size
18KB
-
Sample
221130-tdt9eage9w
-
MD5
bf38346431c758df4bd99e3d4b5fcab1
-
SHA1
08f72bdd853bd37bcfc697e58ea78faad64007a1
-
SHA256
52b575d356d01ed7ee3bac6f661a15445b25114ede3b17abd84c5f23ffdd7f7e
-
SHA512
e8ac260a57fa01d7c45d42997a567fe3951151cd35b0d3da79163d9e324f4bf34f071e2db01c61ceb03a10de2953f1bd6167556d99c6e88edce1423d9acfc38e
-
SSDEEP
384:4FhW90ydPUDyn1MtzIVc/bmNLAwQghdkHTCFqnM2i7NPwG8:MQ1U6cszQEdN8nM2ipPQ
Behavioral task
behavioral1
Sample
52b575d356d01ed7ee3bac6f661a15445b25114ede3b17abd84c5f23ffdd7f7e.xlsb
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
52b575d356d01ed7ee3bac6f661a15445b25114ede3b17abd84c5f23ffdd7f7e.xlsb
Resource
win10v2004-20220812-en
Malware Config
Extracted
http://fast-cargo.com/images/file/vb/Upload.vbs
Targets
-
-
Target
52b575d356d01ed7ee3bac6f661a15445b25114ede3b17abd84c5f23ffdd7f7e
-
Size
18KB
-
MD5
bf38346431c758df4bd99e3d4b5fcab1
-
SHA1
08f72bdd853bd37bcfc697e58ea78faad64007a1
-
SHA256
52b575d356d01ed7ee3bac6f661a15445b25114ede3b17abd84c5f23ffdd7f7e
-
SHA512
e8ac260a57fa01d7c45d42997a567fe3951151cd35b0d3da79163d9e324f4bf34f071e2db01c61ceb03a10de2953f1bd6167556d99c6e88edce1423d9acfc38e
-
SSDEEP
384:4FhW90ydPUDyn1MtzIVc/bmNLAwQghdkHTCFqnM2i7NPwG8:MQ1U6cszQEdN8nM2ipPQ
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-