General
-
Target
vvv.sample
-
Size
328KB
-
Sample
230719-q1sgjsha3z
-
MD5
e5b6bf1c7ead9f74dc763021ce195b42
-
SHA1
1a759d31f0c6d8b1f5e3dd389bc78d2c20718e82
-
SHA256
04b46a5cf4add15d6d3bf71449ee547eac6d84c841daf418dbb47b00a4361af5
-
SHA512
c1cf06d29a1a1a3aa6505abdc51908373707790c5eeac3d9ad58393ba7e698d453d1a2f260da107453d8ee4f3c2cb148c3ae0a9f7f90bfb9d37b093acee88f11
-
SSDEEP
6144:eRMlgE+mJ9ABc/nv5k8IKAhBfsOwmLgzLc1pTcsGEdDIPmhsB0vRakfzeQZNPQ:eRMmEv2Bc/nvm8IKABfsYOmauFzQ
Behavioral task
behavioral1
Sample
vvv.xlsm
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
vvv.xlsm
Resource
win10v2004-20230703-en
Malware Config
Extracted
http://193.203.202.55/44300,5396033565.dat
http://190.14.37.245/44300,5396033565.dat
http://194.67.214.216/44300,5396033565.dat
Targets
-
-
Target
vvv.sample
-
Size
328KB
-
MD5
e5b6bf1c7ead9f74dc763021ce195b42
-
SHA1
1a759d31f0c6d8b1f5e3dd389bc78d2c20718e82
-
SHA256
04b46a5cf4add15d6d3bf71449ee547eac6d84c841daf418dbb47b00a4361af5
-
SHA512
c1cf06d29a1a1a3aa6505abdc51908373707790c5eeac3d9ad58393ba7e698d453d1a2f260da107453d8ee4f3c2cb148c3ae0a9f7f90bfb9d37b093acee88f11
-
SSDEEP
6144:eRMlgE+mJ9ABc/nv5k8IKAhBfsOwmLgzLc1pTcsGEdDIPmhsB0vRakfzeQZNPQ:eRMmEv2Bc/nvm8IKABfsYOmauFzQ
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-