General
- Target bcaf5253d24c3bdfb17d9a21ffabb5d2e1c31dff584c6677333a9f34062e8441
- Size 739KB
- Sample260914-zbjmsaxale
- SHA256 bcaf5253d24c3bdfb17d9a21ffabb5d2e1c31dff584c6677333a9f34062e8441
- MD5 58a7612508df79611129d24f8990827c
- SHA1 223e036a53b30a3095df2fcf8ee7752a33e67a96
- SHA512 78c8e082caec7079322066b4e6552418848aa60b397f1e7901e21cc30be052cc3e06b09b0c01e320fdc8226ca00d27804ea2830330120cdd7a88e40a23f813d1
- SSDEEP 12288:ha2dF10LYn3NZ6kTsIOtfpWZRSCgTpGRl46tJXL7DRsson5hTENhWtF/+L/dzTYZ:deMikUfp00fI5Jb5UhTEN4F/+zdzT6vf
- TLSH T1DDF4236EB9E47178FB314A7871C09DE1B26E916AC51F73D80C8354C8D966D4338EEB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
bcaf5253d24c3bdfb17d9a21ffabb5d2e1c31dff584c6677333a9f34062e8441.docm
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
bcaf5253d24c3bdfb17d9a21ffabb5d2e1c31dff584c6677333a9f34062e8441.docm
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
diceloader
C2
-
185.172.129.70
-
162.248.225.148
Targets
-
- Target bcaf5253d24c3bdfb17d9a21ffabb5d2e1c31dff584c6677333a9f34062e8441
- Size 739KB
- SHA256 bcaf5253d24c3bdfb17d9a21ffabb5d2e1c31dff584c6677333a9f34062e8441
- MD5 58a7612508df79611129d24f8990827c
- SHA1 223e036a53b30a3095df2fcf8ee7752a33e67a96
- SHA512 78c8e082caec7079322066b4e6552418848aa60b397f1e7901e21cc30be052cc3e06b09b0c01e320fdc8226ca00d27804ea2830330120cdd7a88e40a23f813d1
- SSDEEP 12288:ha2dF10LYn3NZ6kTsIOtfpWZRSCgTpGRl46tJXL7DRsson5hTENhWtF/+L/dzTYZ:deMikUfp00fI5Jb5UhTEN4F/+zdzT6vf
- TLSH T1DDF4236EB9E47178FB314A7871C09DE1B26E916AC51F73D80C8354C8D966D4338EEB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Process spawned suspicious child process
This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.