General
- Target 9ba601a4095fee7db6cde77db19c4507fcb40fca4fc41a6979ca41c57597fb2c
- Size 389KB
- Sample260723-m9g6dscc25
- SHA256 9ba601a4095fee7db6cde77db19c4507fcb40fca4fc41a6979ca41c57597fb2c
- MD5 5ffbcb6dd631419925b4da0c09bdde3b
- SHA1 3f6c97f24509a5993d2a63c359342518e424dcbe
- SHA512 ef6ddbc62945c54f9708c14d698498602d128075c13292361738744a532fe15f0a762b034eaf0644020a6d83e0013a2cb9f405c45438c63b16cacdc9d740c60f
- SSDEEP 6144:lo/Hv703NFSqLz/YgjQmgUNaDg9amdb/DxTgR+7NuP240payd25ZgH1bhg:luSbDcUUDAdTDxT++7Qj0syKZoG
- TLSH T14B840102EFDE40D7C147A4B401E7B2379A32F835A560ACCB66904A60571DFE07BDEB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9ba601a4095fee7db6cde77db19c4507fcb40fca4fc41a6979ca41c57597fb2c.xll
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
9ba601a4095fee7db6cde77db19c4507fcb40fca4fc41a6979ca41c57597fb2c.xll
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Extracted
Language
-
xlm4.0
Source
Targets
-
- Target 9ba601a4095fee7db6cde77db19c4507fcb40fca4fc41a6979ca41c57597fb2c
- Size 389KB
- SHA256 9ba601a4095fee7db6cde77db19c4507fcb40fca4fc41a6979ca41c57597fb2c
- MD5 5ffbcb6dd631419925b4da0c09bdde3b
- SHA1 3f6c97f24509a5993d2a63c359342518e424dcbe
- SHA512 ef6ddbc62945c54f9708c14d698498602d128075c13292361738744a532fe15f0a762b034eaf0644020a6d83e0013a2cb9f405c45438c63b16cacdc9d740c60f
- SSDEEP 6144:lo/Hv703NFSqLz/YgjQmgUNaDg9amdb/DxTgR+7NuP240payd25ZgH1bhg:luSbDcUUDAdTDxT++7Qj0syKZoG
- TLSH T14B840102EFDE40D7C147A4B401E7B2379A32F835A560ACCB66904A60571DFE07BDEB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Deletes itself
-
Loads dropped DLL