General
- Target NewDoc.dotm
- Size 18KB
- Sample260721-pgmarahc46
- SHA256 3a4cdc0093417cee6fbfb35d6cb8e9dc259a24df1fa1dc64c98ad33814b9459f
Score
10/10
Malware Config
Targets
-
- Target NewDoc.dotm
- Size 18KB
- SHA256 3a4cdc0093417cee6fbfb35d6cb8e9dc259a24df1fa1dc64c98ad33814b9459f
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory