General
-
Target
74ff7e7adc7c3926e45143fe7ee1ba07
-
Size
36KB
-
Sample
240125-t8besabgam
-
MD5
74ff7e7adc7c3926e45143fe7ee1ba07
-
SHA1
04f0cc8f411db9545e825ce05218ea91b00c48ba
-
SHA256
dd869415613ab9aea2599927c23572bcefd9466af5a69f8f6ab239dc2f6c84bb
-
SHA512
f56de18c85d60649b10fa3c444713a049faa9ab6e99162fe357cd6ffae17e0e8b550b5b57fae889ca3059a94299fc7a27ae3b2e415f291c691eb4a90842ea69a
-
SSDEEP
768:APqNk3hbdlylKsgqopeJBWhZFGkE+cL2NdAJnGbm5+LlQqKqTD:Mok3hbdlylKsgqopeJBWhZFGkE+cL2Nr
Behavioral task
behavioral1
Sample
74ff7e7adc7c3926e45143fe7ee1ba07.xls
Resource
win7-20231215-en
Malware Config
Extracted
https://markens.online/wp-data.php
https://statedauto.com/wp-data.php
Targets
-
-
Target
74ff7e7adc7c3926e45143fe7ee1ba07
-
Size
36KB
-
MD5
74ff7e7adc7c3926e45143fe7ee1ba07
-
SHA1
04f0cc8f411db9545e825ce05218ea91b00c48ba
-
SHA256
dd869415613ab9aea2599927c23572bcefd9466af5a69f8f6ab239dc2f6c84bb
-
SHA512
f56de18c85d60649b10fa3c444713a049faa9ab6e99162fe357cd6ffae17e0e8b550b5b57fae889ca3059a94299fc7a27ae3b2e415f291c691eb4a90842ea69a
-
SSDEEP
768:APqNk3hbdlylKsgqopeJBWhZFGkE+cL2NdAJnGbm5+LlQqKqTD:Mok3hbdlylKsgqopeJBWhZFGkE+cL2Nr
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-