Analysis

  • max time kernel
    183s
  • max time network
    191s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    12-05-2022 16:46

General

  • Target

    vclurtyw.xlsm

  • Size

    50KB

  • MD5

    793c5a832ea9b3c4a225bc96b4449bc2

  • SHA1

    168afc78144b659b18b606a26c3e9a6343dd104a

  • SHA256

    894658b992050ab6d7ee061f083a48264ce56c1b4fbc5ac87c142765405a47f7

  • SHA512

    df041addb6c8113b2add5439f8ce258016233a47a13a3d540187872e4ac25fe3ac87b016bb391a703e0cb73189f1720c0e723b6df47ef971238312ed77a9b607

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\vclurtyw.xlsm"
    1⤵
      PID:1592

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1592-130-0x00007FFF72A50000-0x00007FFF72A60000-memory.dmp

      Filesize

      64KB

    • memory/1592-132-0x00007FFF72A50000-0x00007FFF72A60000-memory.dmp

      Filesize

      64KB

    • memory/1592-131-0x00007FFF72A50000-0x00007FFF72A60000-memory.dmp

      Filesize

      64KB

    • memory/1592-133-0x00007FFF72A50000-0x00007FFF72A60000-memory.dmp

      Filesize

      64KB

    • memory/1592-134-0x00007FFF72A50000-0x00007FFF72A60000-memory.dmp

      Filesize

      64KB