General
- Target af2da35bd05abcc73ce04f9ee775209e6831a4a3df72c9e8531d35e36d84f84f
- Size 892KB
- Sample240728-2mwslayfrm
- SHA256 af2da35bd05abcc73ce04f9ee775209e6831a4a3df72c9e8531d35e36d84f84f
Score
10/10
Malware Config
Targets
-
- Target af2da35bd05abcc73ce04f9ee775209e6831a4a3df72c9e8531d35e36d84f84f
- Size 892KB
- SHA256 af2da35bd05abcc73ce04f9ee775209e6831a4a3df72c9e8531d35e36d84f84f
Score10/10-
Hancitor
Hancitor is downloader used to deliver other malware families.
-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.