General
- Target legal agreement-06.28.2021.doc
- Size 50KB
- Sample210629-pblb27tkc2
- SHA256 133eaec108dcdf485a65616e0b26d8ffe1781e795b49bef6021c51679bf92c7a
- MD5 ffad9afed8f30d780cac0808da1c5d3f
- SHA1 b838575fe38390f411e85505607023b6764101a1
- SHA512 91823ef5ca872eb7dd93b5419de870aaa4e44086b5f0adbb277d2c08d40536146a71378cce8600af82880d5771d6311ce0b9e227795270ac1f83a1c5352b30e0
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
legal agreement-06.28.2021.doc
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
legal agreement-06.28.2021.doc
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Targets
-
- Target legal agreement-06.28.2021.doc
- Size 50KB
- SHA256 133eaec108dcdf485a65616e0b26d8ffe1781e795b49bef6021c51679bf92c7a
- MD5 ffad9afed8f30d780cac0808da1c5d3f
- SHA1 b838575fe38390f411e85505607023b6764101a1
- SHA512 91823ef5ca872eb7dd93b5419de870aaa4e44086b5f0adbb277d2c08d40536146a71378cce8600af82880d5771d6311ce0b9e227795270ac1f83a1c5352b30e0
- MD5 SHA1 SHA512
Score10/10Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
Blocklisted process makes network request