General
- Target ProductList_RFQX3DXUTF-8XBX4oCTIFB1cmNoYXNlIE9yZGVyIDQwMDAwMDAxMDcyMDI2IOKAkyBRdW90YXRpb24gUmVxdWlyZWQgYnkgSnVseSAyX3D2CX2026.xls
- Size 542KB
- Sample260701-lp71msay3p
- SHA256 d91c0e47050b3d3ae212b58ee8d38999664a9374c888302b0ec0a2edf5f96622
- MD5 7b75722e2a6c8502d6b2637bf0b4def7
- SHA1 0f8824b4d1637d10f53b1c712ced12923b4a8d9f
- SHA512 a9ce8a18b72bd61ad20b46c4f513df294c38ff111700c5e6dd6adb1a7bf3b3f8dd196d75cfd4d8986856e680bf2b68cec7e142b7e50d85f802cef8adba11bb0d
- SSDEEP 12288:0JxAPXRCp+79QG0WW7z2Eza2WzGoWCAsmp8paCwcG:2A/EdcvGoWlf
- TLSH T1FAC4236472C2FD0ACA27A33484A595C7811BFC638F86E7573624B34C90747E772672AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
ProductList_RFQX3DXUTF-8XBX4oCTIFB1cmNoYXNlIE9yZGVyIDQwMDAwMDAxMDcyMDI2IOKAkyBRdW90YXRpb24gUmVxdWlyZ.xls
Resource
win10v2004-20260513-en
7 signatures
40 seconds
Behavioral task
behavioral2
Sample
ProductList_RFQX3DXUTF-8XBX4oCTIFB1cmNoYXNlIE9yZGVyIDQwMDAwMDAxMDcyMDI2IOKAkyBRdW90YXRpb24gUmVxdWlyZ.xls
Resource
win11ltsc2024-20260629-en
9 signatures
40 seconds
Malware Config
Targets
-
- Target ProductList_RFQX3DXUTF-8XBX4oCTIFB1cmNoYXNlIE9yZGVyIDQwMDAwMDAxMDcyMDI2IOKAkyBRdW90YXRpb24gUmVxdWlyZWQgYnkgSnVseSAyX3D2CX2026.xls
- Size 542KB
- SHA256 d91c0e47050b3d3ae212b58ee8d38999664a9374c888302b0ec0a2edf5f96622
- MD5 7b75722e2a6c8502d6b2637bf0b4def7
- SHA1 0f8824b4d1637d10f53b1c712ced12923b4a8d9f
- SHA512 a9ce8a18b72bd61ad20b46c4f513df294c38ff111700c5e6dd6adb1a7bf3b3f8dd196d75cfd4d8986856e680bf2b68cec7e142b7e50d85f802cef8adba11bb0d
- SSDEEP 12288:0JxAPXRCp+79QG0WW7z2Eza2WzGoWCAsmp8paCwcG:2A/EdcvGoWlf
- TLSH T1FAC4236472C2FD0ACA27A33484A595C7811BFC638F86E7573624B34C90747E772672AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.