General
- Target PW_infected_SINO5900174_xls.zip
- Size 449KB
- Sample260630-lfb7lsb16j
- SHA256 a901fd26d208f15a6d53b1ef00b2b39fb74bbd91940c95d47b157a50cc0a0dda
- MD5 a4411f3a1c6313769a622db2675137bb
- SHA1 c3047334febd32f6b99984c08b52081851a3d520
- SHA512 dc7c0da51cf689cfbadf9f4aaca5e76494ab30b7067a6c35dec6cdd74236517b19cc17ba8d6ec6d697e6c7397fccae11cf928c95184b23f241b17cdef45a9e06
- SSDEEP 12288:YWX8Otjh0XdvqW7CoBP6gEPLN+XI5yq2KscresPsaTV62pJ3oVY7W:YWwqTsCgEDNAIMPijTV62XoVIW
- TLSH T163A4239A5C20F428AFC122027477653412A480A67DEAEA5723F08767E7C7C177B5AF1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SINO5900174.xls
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target SINO5900174.xls
- Size 473KB
- SHA256 7e30c40ff7774b18fe28583fac68b32b7b23f3bd233007ef4c53f08a151a3c11
- MD5 c17c3b45a50f840b0826211fd0095308
- SHA1 f6a2cdcbca3e0a113db3e01b6fc03ebd060206a5
- SHA512 3e01586cf0af726af6b97628f859119bcaab627b0c35ea21a20ddfb018b3bbe1dde8d4cf44f1121efeda3ee5cf93b1be09660bafc6d630eb79b9b665f2a2b72b
- SSDEEP 12288:kAPXRCB+79QG0Z3S67zzTu5H8Tf5w5JuhYc:kA/EFpTup8b4JuhR
- TLSH T130A42299B189FE5BC133A074CD90D6D22C26EDAB0F89E54F3550F38E5839358166F0AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.