Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    29-10-2020 04:37

General

  • Target

    doc_pack-2058240740.xlsb

  • Size

    24KB

  • MD5

    4557b6f6c2d98533b7e326e511db9f59

  • SHA1

    444762ced2ab1d49e17825a3f243c945ce8382ad

  • SHA256

    e9876953bdad3ed19428078d285cfe5128abdb37ad69e9b4f2d5d451e2f99a11

  • SHA512

    345f24bbca7e4a584c257efd962404c3f383338dd2711090940008eccea4639da57324f61fdcb0e7864e4e6b6c37cb0ce642668e17b5b6e14a0239966de4ee9d

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 9 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
    "C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\doc_pack-2058240740.xlsb
    1⤵
    • Enumerates system info in registry
    • Modifies Internet Explorer settings
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:1992

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1792-0-0x000007FEF7020000-0x000007FEF729A000-memory.dmp

    Filesize

    2.5MB