Analysis

  • max time kernel
    2s
  • max time network
    4s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    11-01-2021 07:18

General

  • Target

    RF-E68-STD-2020-106.xlsx

  • Size

    2.2MB

  • MD5

    f0d942e77854126c4b9bc7b110240c66

  • SHA1

    6dd288b1d99a25c1d4c11f2fbbbfc82e5d5c8c99

  • SHA256

    26fc8c9e26295218425a24bb361c1aede22cd23943fb5441966f46b58cddefdc

  • SHA512

    938ff0d73a63d00ed6433c60b263f22bca44b25553b30eb77ac1260e03c87059c5ba8c44cf835e207cf00ca646a5e8ebc88e7028c79b22434f44524d11be3771

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\RF-E68-STD-2020-106.xlsx"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1176-2-0x00007FFE6DA30000-0x00007FFE6E067000-memory.dmp

    Filesize

    6.2MB