General
-
Target
ca7ed00659b9a1d7f17a9fef6e55718e
-
Size
158KB
-
Sample
240315-e5z7eagc5s
-
MD5
ca7ed00659b9a1d7f17a9fef6e55718e
-
SHA1
5c1af52e2f6c17a3ec6878431f8303e93673ef98
-
SHA256
cee52cea1d85083b781607bbe9752269f9336e23cd58a37f3f588fbfab9256a8
-
SHA512
d84d6bf923c64acc56e012048f158cdf257e87dfc0af4ce95b00a961715c545f4edfa394c6d55c6d6eab560e7e07b0bd9656a636fcdf56099866a35d511cf2b2
-
SSDEEP
3072:pHlTkdm3bGeAxidxVymd1xXPMU9VlUBWA6CFvA7bRCxAVIKKNB:pFTkeGKdxVyWxfMU3liWA6FsYq
Behavioral task
behavioral1
Sample
ca7ed00659b9a1d7f17a9fef6e55718e.xlsm
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca7ed00659b9a1d7f17a9fef6e55718e.xlsm
Resource
win10v2004-20240226-en
Malware Config
Extracted
https://biopaten.no/xeBP8Oj5/gg.html
https://beartoothkawasaki.com/QJT19jhtwHt/gg.html
Targets
-
-
Target
ca7ed00659b9a1d7f17a9fef6e55718e
-
Size
158KB
-
MD5
ca7ed00659b9a1d7f17a9fef6e55718e
-
SHA1
5c1af52e2f6c17a3ec6878431f8303e93673ef98
-
SHA256
cee52cea1d85083b781607bbe9752269f9336e23cd58a37f3f588fbfab9256a8
-
SHA512
d84d6bf923c64acc56e012048f158cdf257e87dfc0af4ce95b00a961715c545f4edfa394c6d55c6d6eab560e7e07b0bd9656a636fcdf56099866a35d511cf2b2
-
SSDEEP
3072:pHlTkdm3bGeAxidxVymd1xXPMU9VlUBWA6CFvA7bRCxAVIKKNB:pFTkeGKdxVyWxfMU3liWA6FsYq
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-