General
-
Target
eec72d3d2701627967c9c884fd81533b0197ec50a8e3a119b4091c274df6e7fb
-
Size
60KB
-
Sample
241120-v25wgszpcs
-
MD5
81941c54353528a5cb9ee3ab072b7c37
-
SHA1
520adfcc3394cead439d2e3fe8fe9dd166a6467f
-
SHA256
eec72d3d2701627967c9c884fd81533b0197ec50a8e3a119b4091c274df6e7fb
-
SHA512
4e61ffecf04674579e9edae83a3203080bfdc45ac1740f1bf18c6708d09a78789a3b9f3227f123dd324bca1ef8f06860a6621157d6fe794dbde80a0371f00017
-
SSDEEP
1536:NpKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgUDOJiA6Cv/UGLI36yOAR5N:rKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgo
Behavioral task
behavioral1
Sample
eec72d3d2701627967c9c884fd81533b0197ec50a8e3a119b4091c274df6e7fb.xls
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eec72d3d2701627967c9c884fd81533b0197ec50a8e3a119b4091c274df6e7fb.xls
Resource
win10v2004-20241007-en
Malware Config
Extracted
http://www.valyval.com/pun/VAYL/
http://cabans.com/CeudWYRQEzZgrHPcI/
http://calzadoyuyin.com/cgj-bin/jZPff/
http://cagranus.com/slide/mcqAFuMhaekn/
Targets
-
-
Target
eec72d3d2701627967c9c884fd81533b0197ec50a8e3a119b4091c274df6e7fb
-
Size
60KB
-
MD5
81941c54353528a5cb9ee3ab072b7c37
-
SHA1
520adfcc3394cead439d2e3fe8fe9dd166a6467f
-
SHA256
eec72d3d2701627967c9c884fd81533b0197ec50a8e3a119b4091c274df6e7fb
-
SHA512
4e61ffecf04674579e9edae83a3203080bfdc45ac1740f1bf18c6708d09a78789a3b9f3227f123dd324bca1ef8f06860a6621157d6fe794dbde80a0371f00017
-
SSDEEP
1536:NpKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgUDOJiA6Cv/UGLI36yOAR5N:rKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgo
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-