General
-
Target
92b4b734be815421f0ea5631f80e5388147e6cf2daabf9bfeff61c8e16a78dd0.xls
-
Size
91KB
-
Sample
241121-nev97swmcj
-
MD5
c38157ab17f97bc72d9bb4ad15c98e7b
-
SHA1
235ce1d4e251d39ca43610594256a6813dfbd6f0
-
SHA256
92b4b734be815421f0ea5631f80e5388147e6cf2daabf9bfeff61c8e16a78dd0
-
SHA512
5bd296da55775c977d658867132eaa939c4c508cf032ff8854f61676bc0c476ce159daf9364a28eccfb175d5c2b81fe0593f09d9e8e49f1df94a0cd149d738e8
-
SSDEEP
1536:vKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgHbCXuZH4gb4CEn9J4ZnX5:vKpb8rGYrMPe3q7Q0XV5xtezEsi8/dg9
Behavioral task
behavioral1
Sample
92b4b734be815421f0ea5631f80e5388147e6cf2daabf9bfeff61c8e16a78dd0.xls
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
92b4b734be815421f0ea5631f80e5388147e6cf2daabf9bfeff61c8e16a78dd0.xls
Resource
win10v2004-20241007-en
Malware Config
Extracted
https://datie-tw.com/img/O8G0RDZj7MYCuJyPoP/
http://sbm.xinmoshiwang.com/upload/VaOfWEb3pW76UO/
https://copunupo.ac.zm/cgi-bin/WFFcGx/
http://ly.yjlianyi.top/wp-admin/4cChao/
Targets
-
-
Target
92b4b734be815421f0ea5631f80e5388147e6cf2daabf9bfeff61c8e16a78dd0.xls
-
Size
91KB
-
MD5
c38157ab17f97bc72d9bb4ad15c98e7b
-
SHA1
235ce1d4e251d39ca43610594256a6813dfbd6f0
-
SHA256
92b4b734be815421f0ea5631f80e5388147e6cf2daabf9bfeff61c8e16a78dd0
-
SHA512
5bd296da55775c977d658867132eaa939c4c508cf032ff8854f61676bc0c476ce159daf9364a28eccfb175d5c2b81fe0593f09d9e8e49f1df94a0cd149d738e8
-
SSDEEP
1536:vKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgHbCXuZH4gb4CEn9J4ZnX5:vKpb8rGYrMPe3q7Q0XV5xtezEsi8/dg9
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-