Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
ACH-6573-15March.xlsx
|
Microsoft Excel 2007+
|
initial sample
|
 |
|
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\619E9856.gif
|
GIF image data, version 89a, 1400 x 670
|
dropped
|
||
|
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\626005F.png
|
PNG image data, 300 x 153, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
|
C:\Users\user\AppData\Local\Temp\~DF645802A6CB8EDC27.TMP
|
Composite Document File V2 Document, Cannot read section info
|
dropped
|
||
|
C:\Users\user\Desktop\~$ACH-6573-15March.xlsx
|
data
|
dropped
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
part-0012.t-0009.t-msedge.net
|
13.107.213.40
|
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
52.109.56.128
|
unknown
|
United States
|
||
|
52.113.194.132
|
unknown
|
United States
|
||
|
52.109.8.36
|
unknown
|
United States
|
||
|
13.107.213.40
|
part-0012.t-0009.t-msedge.net
|
United States
|
||
|
52.182.143.213
|
unknown
|
United States
|
||
|
23.51.58.94
|
unknown
|
United States
|