Extracted

• • Target
    purchase order-419617892#..xlsb
  • Size 69KB
  • SHA256 f148e9a2089039a66fa624e1ffff5ddc5ac5190ee9fdef35a0e973725b60fbc9
  • MD5 34339f5f8f3b303aad00272edfa2827f
  • SHA1 e1273963b7b1b7613f77e0ce353c108ae7557968
  • SHA512 fa74fab1b5762d712e61c465accd756b76d1a7c48a27f4b56e2f4298511f1ef8eb81d859763344fd7a14c57df5faa83db4c2bdb7f50c3c44e50582827fb17a4d
  • MD5 SHA1 SHA512

  Score

  10^/10

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Drops startup file

  • Loads dropped DLL

  behavioral1behavioral2