Static task
static1
Behavioral task
behavioral1
Sample
Scan5437.xls
Resource
win7-20240705-en
remcosremotehostcollectioncredential_accessdefense_evasiondiscoveryevasionexecutionpersistenceratspywarestealerthemidatrojan
30 signatures
150 seconds
Behavioral task
behavioral2
Sample
Scan5437.xls
Resource
win10v2004-20240802-en
9 signatures
150 seconds
Errors
Reason
office: non-rc4 encrypted document not supported
General
-
Target
2cadef5bccc2f5368e9a4f6a4b529c9981fb681dc7f3f9e47ce1a7cd5a07c7dc
-
Size
560KB
-
MD5
82aad6ea4d38d503bd739c781baca785
-
SHA1
5759d31c79906b72bc0d28780751e7208af697bc
-
SHA256
2cadef5bccc2f5368e9a4f6a4b529c9981fb681dc7f3f9e47ce1a7cd5a07c7dc
-
SHA512
2ce8444b6dafef979a232d682fea87d681433d8a4244f553648ffdfa5a9a97bf5bb85520010768c979ad6f6de86fb7a8843d0d1c83820547bbc29b684d114060
-
SSDEEP
12288:ivJ3YOHNZHxwzgjemPUc/UzjqFhSe3tylRuOLF12VpY:KY2fHxwzgj52jq+e3cRuOhwY
Score
1/10
Malware Config
Signatures
Files
-
2cadef5bccc2f5368e9a4f6a4b529c9981fb681dc7f3f9e47ce1a7cd5a07c7dc.zip
Password: infected
-
20240827_225529_drlsLkwWrKvDiXcu-4Qga-ra-JqRvhRm.eml.eml
-
Scan5437.xls.xls windows office2003
-
email-html-2.txt.html
-
email-plain-1.txt