General
-
Target
53553852c1e639667bf7f8bab711b1bae9d21aebdcc4fab5cbebfdcaa2788cc5
-
Size
91KB
-
Sample
241121-ad176s1khn
-
MD5
5bea7e67d77daa503d9ebc71cfe86dba
-
SHA1
8d4cff00024d3f7bcffb5f47a3e9a87fbb984149
-
SHA256
53553852c1e639667bf7f8bab711b1bae9d21aebdcc4fab5cbebfdcaa2788cc5
-
SHA512
159e49b4b2a0ef117a5d62c5f424e8de80883b13dce1d6c3e07c0805621490278a49dd4d87304113fd578e9c0866339754c9f3255b4a6ebcabec2c938f8f053c
-
SSDEEP
1536:LKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgMbCXuZH4gb4CEn9J4ZiX3O:LKpb8rGYrMPe3q7Q0XV5xtezEsi8/dg2
Behavioral task
behavioral1
Sample
53553852c1e639667bf7f8bab711b1bae9d21aebdcc4fab5cbebfdcaa2788cc5.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
53553852c1e639667bf7f8bab711b1bae9d21aebdcc4fab5cbebfdcaa2788cc5.xls
Resource
win10v2004-20241007-en
Malware Config
Extracted
https://encuadernacionesartis.com/Vk2Z1Na/IZpyySkbU/
http://eznetb.synology.me/@eaDir/E36Y/
http://bytesendesign.nl/cgi-bin/LolX/
http://choltice.eu/mwc/syl3Y/
Targets
-
-
Target
53553852c1e639667bf7f8bab711b1bae9d21aebdcc4fab5cbebfdcaa2788cc5
-
Size
91KB
-
MD5
5bea7e67d77daa503d9ebc71cfe86dba
-
SHA1
8d4cff00024d3f7bcffb5f47a3e9a87fbb984149
-
SHA256
53553852c1e639667bf7f8bab711b1bae9d21aebdcc4fab5cbebfdcaa2788cc5
-
SHA512
159e49b4b2a0ef117a5d62c5f424e8de80883b13dce1d6c3e07c0805621490278a49dd4d87304113fd578e9c0866339754c9f3255b4a6ebcabec2c938f8f053c
-
SSDEEP
1536:LKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgMbCXuZH4gb4CEn9J4ZiX3O:LKpb8rGYrMPe3q7Q0XV5xtezEsi8/dg2
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-