Extracted

Extracted

• • Target
    TrickBot.xls
  • Size 366KB
  • SHA256 5220f86bf7ae58b02715d1bcafc82736437a4e9a05ab3830857141c172f76a89
  • MD5 d7468f3bfae912928bdf3b8ddc0d8ff9
  • SHA1 82358eabd3fe59637b2294e2dfdc1f9cdb292676
  • SHA512 b2e33fb8e8ac5ed4684b89fec07b6af3bbae66dee437c7887047da909fb8c5355c5c37d3749439af57e8535feb83de99c0ecaec2409bae41401e48f9149c5ff1
  • SSDEEP 6144:mE5GKMsxEm9SyKXociraZ9PV+W2/dyCqiXhpy9LKbt/W8GmtBxgDYbze6/GbxxYB:6CtXhpyEXjtLgDMr/GbxxYJqRytOTfd+
  • TLSH
    T12C84D0F3F7A8EF86C3167B76449A4261235BFCA615E90607B3817B2B7A3D9630D4106C
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Process spawned suspicious child process

    This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

  behavioral1behavioral2