Analysis

  • max time kernel
    158s
  • max time network
    168s
  • platform
    windows10_x64
  • resource
    win10-en-20211208
  • submitted
    17-01-2022 23:08

General

  • Target

    b74ebda344b21397a7dda793d725fc98a04efae5d4cc51c8c8b6f9c253bdcb83.xlsm

  • Size

    110KB

  • MD5

    88ba108c5c564f6dab3e1c4031a9a7e9

  • SHA1

    fbffd091afdae3d1e40a17e4f1c73174afc6234e

  • SHA256

    b74ebda344b21397a7dda793d725fc98a04efae5d4cc51c8c8b6f9c253bdcb83

  • SHA512

    82fec2d0679d56c1911d606463a5f5894c5de0ded95a11315f38fea796298884b24a37b10f9c5d1df3fdfc044b06c71f75e74d7b53fab57c133798a0124736ff

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\b74ebda344b21397a7dda793d725fc98a04efae5d4cc51c8c8b6f9c253bdcb83.xlsm"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3044-118-0x00007FFF06850000-0x00007FFF06860000-memory.dmp

    Filesize

    64KB

  • memory/3044-119-0x00007FFF06850000-0x00007FFF06860000-memory.dmp

    Filesize

    64KB

  • memory/3044-120-0x00007FFF06850000-0x00007FFF06860000-memory.dmp

    Filesize

    64KB

  • memory/3044-121-0x00007FFF06850000-0x00007FFF06860000-memory.dmp

    Filesize

    64KB

  • memory/3044-122-0x00007FFF06850000-0x00007FFF06860000-memory.dmp

    Filesize

    64KB

  • memory/3044-123-0x000002D9193A0000-0x000002D9193A2000-memory.dmp

    Filesize

    8KB

  • memory/3044-124-0x000002D9193A0000-0x000002D9193A2000-memory.dmp

    Filesize

    8KB

  • memory/3044-125-0x000002D9193A0000-0x000002D9193A2000-memory.dmp

    Filesize

    8KB

  • memory/3044-131-0x00007FFF03D00000-0x00007FFF03D10000-memory.dmp

    Filesize

    64KB

  • memory/3044-132-0x00007FFF03D00000-0x00007FFF03D10000-memory.dmp

    Filesize

    64KB

  • memory/3044-152-0x000002D9193A0000-0x000002D9193A2000-memory.dmp

    Filesize

    8KB