General
-
Target
6365e0269924253f6b1c679d4e3a083b27b40eea37dc635b4fd7f476ca97b32d
-
Size
91KB
-
Sample
241120-cvfnxatjgl
-
MD5
2d0a8c1c93547729e38763ba9877537d
-
SHA1
6bc2089572454c78aa782b493ecf35c6c489c72b
-
SHA256
6365e0269924253f6b1c679d4e3a083b27b40eea37dc635b4fd7f476ca97b32d
-
SHA512
1d1933d1883586d9e8a3139806351b607fafeb12f390a3430607538c7ab463d37302593159384c912653b8d7ce320e53c68f6d20fac54a36ec6c34c3ad648b1d
-
SSDEEP
1536:eKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgCbCXuZH4gb4CEn9J4ZiL5:eKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgp
Behavioral task
behavioral1
Sample
6365e0269924253f6b1c679d4e3a083b27b40eea37dc635b4fd7f476ca97b32d.xls
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6365e0269924253f6b1c679d4e3a083b27b40eea37dc635b4fd7f476ca97b32d.xls
Resource
win10v2004-20241007-en
Malware Config
Extracted
http://helpeve.com/wp-admin/sOdeuF1c4DV2h/
http://christplanet.com/wp-admin/maint/mtlsi/TxsAE7TAAb/
http://www.chawkyfrenn.com/icon/LRWYSefRL7/
http://chist.com/dir-/N5zALqqTmf/
Targets
-
-
Target
6365e0269924253f6b1c679d4e3a083b27b40eea37dc635b4fd7f476ca97b32d
-
Size
91KB
-
MD5
2d0a8c1c93547729e38763ba9877537d
-
SHA1
6bc2089572454c78aa782b493ecf35c6c489c72b
-
SHA256
6365e0269924253f6b1c679d4e3a083b27b40eea37dc635b4fd7f476ca97b32d
-
SHA512
1d1933d1883586d9e8a3139806351b607fafeb12f390a3430607538c7ab463d37302593159384c912653b8d7ce320e53c68f6d20fac54a36ec6c34c3ad648b1d
-
SSDEEP
1536:eKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgCbCXuZH4gb4CEn9J4ZiL5:eKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgp
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-