General
- Target 12f06298a5693988349a53aee9eb505060d5f69c622e7cb3f3970b38e6efbf62.xlsx
- Size 47KB
- Sample260422-hawghset2x
- SHA256 12f06298a5693988349a53aee9eb505060d5f69c622e7cb3f3970b38e6efbf62
- MD5 331768e73291d5c44cf46fe8150b57af
- SHA1 97173d80926daec0741e20237c0501d52a79e746
- SHA512 d0d7afa415ec8a152c4ee648190e4c9c720fac4c3bc30e14e529a0b02e7d37310caa047b08c47aa1d30c8715024b854a9bcf93bebeb4bba6810e3f068f37befc
- SSDEEP 768:0uXWrTdiV2ZA8XQ0nItejELLHKvjAFLJxM1iJZu9xwqpV4GJTs72IBP7:0cU0V2Zk0nIcjELcjAFVem8kigqI
- TLSH T17C23BF21B22F36CCCA6A77BD01B40693EA4DAD084933EB0B64D193342D579E91E1FB4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
12f06298a5693988349a53aee9eb505060d5f69c622e7cb3f3970b38e6efbf62.xlsm
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
12f06298a5693988349a53aee9eb505060d5f69c622e7cb3f3970b38e6efbf62.xlsm
Resource
win11-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 12f06298a5693988349a53aee9eb505060d5f69c622e7cb3f3970b38e6efbf62.xlsx
- Size 47KB
- SHA256 12f06298a5693988349a53aee9eb505060d5f69c622e7cb3f3970b38e6efbf62
- MD5 331768e73291d5c44cf46fe8150b57af
- SHA1 97173d80926daec0741e20237c0501d52a79e746
- SHA512 d0d7afa415ec8a152c4ee648190e4c9c720fac4c3bc30e14e529a0b02e7d37310caa047b08c47aa1d30c8715024b854a9bcf93bebeb4bba6810e3f068f37befc
- SSDEEP 768:0uXWrTdiV2ZA8XQ0nItejELLHKvjAFLJxM1iJZu9xwqpV4GJTs72IBP7:0cU0V2Zk0nIcjELcjAFVem8kigqI
- TLSH T17C23BF21B22F36CCCA6A77BD01B40693EA4DAD084933EB0B64D193342D579E91E1FB4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.