General
- Target e88b8049397c21d470396692ef208d696364e36e556690297779cf68e311a9e6
- Size 893KB
- Sample240728-14vfessblc
- SHA256 e88b8049397c21d470396692ef208d696364e36e556690297779cf68e311a9e6
Score
10/10
Malware Config
Targets
-
- Target e88b8049397c21d470396692ef208d696364e36e556690297779cf68e311a9e6
- Size 893KB
- SHA256 e88b8049397c21d470396692ef208d696364e36e556690297779cf68e311a9e6
Score10/10-
Hancitor
Hancitor is downloader used to deliver other malware families.
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.