General
- Target attachment.zip
- Size 284B
- Sample260729-3an3navbpb
- SHA256 889d79e7e004891e2a887c3a11d37ddd7e9028d53bb33622ae12685776181068
- MD5 e0dd5db184384cb5a9b1762906db0c95
- SHA1 55f99c69399134ee39c7ce9e30cd268e7536b82f
- SHA512 788fe46867ce04639a688dcfc429b2bbaa16c127b3b79f2b62ab87f1953f09993b7b7607e274b1b62e30ec5c80fecc58236a7586dec46c7124a91b5812d49fce
- TLSH T120D097958A16408DF424AEB43A07C3224278A393AA7CEBA9C718AC431C41DD13F026CB
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
mail.rtf
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
mail.rtf
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target mail.rtf
- Size 221B
- SHA256 93ef57b81021be174e33b5b48c1aed525d2785c3607aeb540508bb3713690179
- MD5 9d68678aeee52684bbe3c983222b1da3
- SHA1 ba3ae643e20a26aca550b6888d9107e5d434959c
- SHA512 16e5a46e946363d5ecbe5e9b8a38503123d9d98756a13a9bc8d1a092e82af9660192c6d0c576ccd498c0aedf4a14e8f63c318936fc6487dc38c72fdc42246876
- TLSH T13BD08C44E00FCEA7E10C180128AFB07E28203C439BC826413662B07646C04EE2C3C46A
- MD5 SHA1 SHA512 TLSH
-
Process spawned suspicious child process
This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.