General
- Target shellcode.zip
- Size 361KB
- Sample260713-pvrgmabs7v
- SHA256 6ec04891bf255ef413f8283600d45d299adfb29bb5ba8a525c17c18c4010b0e5
- MD5 fe36b1edd022468df204d4c2769257a5
- SHA1 f901be5b472da872b805d6d34000f6514aa19237
- SHA512 ee6fa01f09c69b43ae5562250bd0f2afca8a5a64e9f893b99f6b01afd0b1e510b33e3a7c759faa26c12394c6dd4dabfcb35b433c8c04fd51443620ea25c2bc6d
- SSDEEP 6144:fcUgEDeA3/fXSWLdeTt5BO2DjgJsig2xiLSJfnPF6JMs+61BOTc1+sfpot7ZK4Ag:0P9AXp0BOI0QLK4JMR61BGcRiyCF
- TLSH T1D4742207CDA21C5EB67B295AAFA841DA5D63BECBA5FF33C5FA22C4C03494D461C11389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
dd38e5378f0de8489c9d015758d8ad390ecdf9599b8a4b90b218f6de6d1c1e16.doc
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
dd38e5378f0de8489c9d015758d8ad390ecdf9599b8a4b90b218f6de6d1c1e16.doc
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target dd38e5378f0de8489c9d015758d8ad390ecdf9599b8a4b90b218f6de6d1c1e16
- Size 634KB
- SHA256 dd38e5378f0de8489c9d015758d8ad390ecdf9599b8a4b90b218f6de6d1c1e16
- MD5 da6cc46575a6bc74509155b5f2657577
- SHA1 d66d46f3cb0a3a9cf2a28a16efc40c854f835cf7
- SHA512 96898b26abaca3518ec156d768fdc903041834de778d832ea9008bd485cfa5627bec6b388e85e9d35c1769ee4390aeb1bee1c95ebea18ed3791700edc55bb516
- SSDEEP 12288:sqlEHtNpyZnqlZJ/OtVxJGo1Yy9pouLPP6OnERzZGQ3U4:sP/wHHxko17LHBERlGQH
- TLSH T106D41531D502FE7ADB96083E890B39F0BCBC3C4749CD565EEA062235677B710B91DA68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.