General
- Target 15102026_0605_14102026_FUGASA_RFQ_Attachment_Items_List_and_Specifications_for_Quotation_Request_1410-26.xlsx.zip
- Size 893KB
- Sample261030-efcptag13x
- SHA256 595141a69efef4f48ae8c1f16a0c6258bac1e5769d7e5b3fa544481e669fd452
Score
10/10
Malware Config
Targets
-
- Target FUGASA_RFQ_Attachment_Items_List_and_Specifications_for_Quotation_Request_1410-26.xlsx.vhdx
- Size 14.0MB
- SHA256 a8e8777346113199e0b2fec681d9f6516baaaa047e009eef2d7f2194099d823d
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Command and Scripting Interpreter: PowerShell
Run Powershell and hide display window.
-
Suspicious use of SetThreadContext