Analysis

  • max time kernel
    159s
  • max time network
    173s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220112
  • submitted
    22/02/2022, 18:11

General

  • Target
    tmpkflua13d.xls
  • Size 88KB
  • Sample220222-wsllxscac6
  • SHA256 2ee9cf661370033cf7e28260de85a7668aac6723d36f66f9ea4310dc8d9e796d
  • MD5 SHA1 SHA512
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\tmpkflua13d.xls"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:2252

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/2252-130-0x00007FFA4C2F0000-0x00007FFA4C300000-memory.dmp

        memory/2252-132-0x00007FFA4C2F0000-0x00007FFA4C300000-memory.dmp

        memory/2252-131-0x00007FFA4C2F0000-0x00007FFA4C300000-memory.dmp

        memory/2252-133-0x00007FFA4C2F0000-0x00007FFA4C300000-memory.dmp

        memory/2252-134-0x00007FFA4C2F0000-0x00007FFA4C300000-memory.dmp

        memory/2252-136-0x00007FFA8C310000-0x00007FFA8C311000-memory.dmp

        memory/2252-135-0x00007FFA8C30D000-0x00007FFA8C30E000-memory.dmp