General
-
Target
Purchase Order Ref 23-183-GS.docx
-
Size
10KB
-
Sample
230323-y869nsbh8w
-
MD5
bdf64063e4a2b92bbf9fdb4ee283166a
-
SHA1
1ceeba2ff0d261d0b9d608e5c4473e15eb6d9d5a
-
SHA256
a850d5cfba419fb66894b56ba97f7c93f2fdea85dc718697d233f96e440d7379
-
SHA512
9a7cf7d4cd16ade98bd7c8fa81842d66a2d0347ad2e73a3dd1b87d4e9e0a6a739ff7028df1f6fab09dd581b8cd8b952df2e9a83cbbe80a7c04be5b7059cdba1a
-
SSDEEP
192:ScIMmtP1aIG/bslPL++uOt+Il+CVWBXJC0c3g+:SPXU/slT+LOtfHkZC9j
Static task
static1
Behavioral task
behavioral1
Sample
Purchase Order Ref 23-183-GS.docx
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
Purchase Order Ref 23-183-GS.docx
Resource
win7-20230220-en
Behavioral task
behavioral3
Sample
Purchase Order Ref 23-183-GS.docx
Resource
win10v2004-20230220-en
Malware Config
Extracted
http://OASOSIDFOSWEROEROOWRWERWEREWWW0W83W338W83WOIEORIOWEIROWI3339W99ER8WE9R923R29849284WERWERWE9RW93949498WWOEIROWEOR23489W@66041506/09...........09..............doc
Targets
-
-
Target
Purchase Order Ref 23-183-GS.docx
-
Size
10KB
-
MD5
bdf64063e4a2b92bbf9fdb4ee283166a
-
SHA1
1ceeba2ff0d261d0b9d608e5c4473e15eb6d9d5a
-
SHA256
a850d5cfba419fb66894b56ba97f7c93f2fdea85dc718697d233f96e440d7379
-
SHA512
9a7cf7d4cd16ade98bd7c8fa81842d66a2d0347ad2e73a3dd1b87d4e9e0a6a739ff7028df1f6fab09dd581b8cd8b952df2e9a83cbbe80a7c04be5b7059cdba1a
-
SSDEEP
192:ScIMmtP1aIG/bslPL++uOt+Il+CVWBXJC0c3g+:SPXU/slT+LOtfHkZC9j
Score8/10-
Blocklisted process makes network request
-
Abuses OpenXML format to download file from external location
-