General
- Target May-Document-6_2024-6683.xlsx
- Size 51KB
- Sample240508-k9f7zsdc4w
- SHA256 a3eeef65c42890fd372bc7c627b36d2b9d54a909b809663e0f0392fa34766794
Score
10/10
Malware Config
Targets
-
- Target May-Document-6_2024-6683.xlsx
- Size 51KB
- SHA256 a3eeef65c42890fd372bc7c627b36d2b9d54a909b809663e0f0392fa34766794
Score10/10Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
Blocklisted process makes network request
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Command and Scripting Interpreter: AutoIT
Using AutoIT for possible automate script.