735f4e4a46c441adc84d100d11eeeeca0de9ff4e1b50f3f957652e64f6b0e411

Submit
Reports

Overview

overview

Static

static

K1-3K2-2�...��.doc

windows7-x64

K1-3K2-2�...��.doc

windows10-2004-x64

K1-3K2-2�...23.xls

windows7-x64

K1-3K2-2�...23.xls

windows10-2004-x64

K1-3K2-2�...¼.doc

windows7-x64

K1-3K2-2�...¼.doc

windows10-2004-x64

K1-3K2-2�...��.doc

windows7-x64

K1-3K2-2�...��.doc

windows10-2004-x64

K1-3K2-2�...֪.doc

windows7-x64

K1-3K2-2�...֪.doc

windows10-2004-x64

K1-3K2-2�...��.doc

windows7-x64

K1-3K2-2�...��.doc

windows10-2004-x64

K1-3K2-2�...��.pdf

windows7-x64

K1-3K2-2�...��.pdf

windows10-2004-x64

K1-3K2-2�...��.xls

windows7-x64

K1-3K2-2�...��.xls

windows10-2004-x64

K1-3K2-2�...��.xls

windows7-x64

K1-3K2-2�...��.xls

windows10-2004-x64

K1-3K2-2�...��.doc

windows7-x64

K1-3K2-2�...��.doc

windows10-2004-x64

K1-3K2-2�...��.doc

windows7-x64

K1-3K2-2�...��.doc

windows10-2004-x64

K1-3K2-2�...��.xls

windows7-x64

K1-3K2-2�...��.xls

windows10-2004-x64

K1-3K2-2�...��.pdf

windows7-x64

K1-3K2-2�...��.pdf

windows10-2004-x64

K1-3K2-2�...��.doc

windows7-x64

K1-3K2-2�...��.doc

windows10-2004-x64

K1-3K2-2�...��.xls

windows7-x64

K1-3K2-2�...��.xls

windows10-2004-x64

K1-3K2-2�...��.pdf

windows7-x64

K1-3K2-2�...��.pdf

windows10-2004-x64

Analysis

max time kernel
303s
max time network
457s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 14:03

Sharing

Copy URL

Twitter E-mail

Static task

static1

macro xlm

1 signatures

Behavioral task

behavioral1

Sample

K1-3K2-2ؿбļ/01.ļ/K3-1+2-2ܻ̼Ҫ.doc

Resource

win7-20221111-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

K1-3K2-2ؿбļ/01.ļ/K3-1+2-2ܻ̼Ҫ.doc

Resource

win10v2004-20220812-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral3

Sample

K1-3K2-2ؿбļ/01.ļ/K3-23ͼֽĿ¼10-23.xls

Resource

win7-20220901-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

K1-3K2-2ؿбļ/01.ļ/K3-23ͼֽĿ¼10-23.xls

Resource

win10v2004-20220901-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral5

Sample

K1-3K2-2ؿбļ/02.ļ/01./0.бļĿ¼.doc

Resource

win7-20220812-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral6

Sample

K1-3K2-2ؿбļ/02.ļ/01./0.бļĿ¼.doc

Resource

win10v2004-20221111-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

K1-3K2-2ؿбļ/02.ļ/01./0.�.doc

Resource

win7-20221111-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral8

Sample

K1-3K2-2ؿбļ/02.ļ/01./0.�.doc

Resource

win10v2004-20221111-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

K1-3K2-2ؿбļ/02.ļ/01./1.Ͷ֪.doc

Resource

win7-20221111-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral10

Sample

K1-3K2-2ؿбļ/02.ļ/01./1.Ͷ֪.doc

Resource

win10v2004-20220812-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

K1-3K2-2ؿбļ/02.ļ/01./2.0Ͷ.doc

Resource

win7-20221111-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral12

Sample

K1-3K2-2ؿбļ/02.ļ/01./2.0Ͷ.doc

Resource

win10v2004-20221111-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

K1-3K2-2ؿбļ/02.ļ/01./2.�.pdf

Resource

win7-20221111-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral14

Sample

K1-3K2-2ؿбļ/02.ļ/01./2.�.pdf

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

K1-3K2-2ؿбļ/02.ļ/01./2.�.xls

Resource

win7-20221111-en

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral16

Sample

K1-3K2-2ؿбļ/02.ļ/01./2.�.xls

Resource

win10v2004-20221111-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral17

Sample

K1-3K2-2ؿбļ/02.ļ/01./2.�.xls

Resource

win7-20221111-en

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral18

Sample

K1-3K2-2ؿбļ/02.ļ/01./2.�.xls

Resource

win10v2004-20220812-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral19

Sample

K1-3K2-2ؿбļ/02.ļ/01./3.�.doc

Resource

win7-20221111-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral20

Sample

K1-3K2-2ؿбļ/02.ļ/01./3.�.doc

Resource

win10v2004-20220812-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

K1-3K2-2ؿбļ/02.ļ/01./4.�.doc

Resource

win7-20221111-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral22

Sample

K1-3K2-2ؿбļ/02.ļ/01./4.�.doc

Resource

win10v2004-20220812-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

K1-3K2-2ؿбļ/02.ļ/01./4.�.xls

Resource

win7-20221111-en

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral24

Sample

K1-3K2-2ؿбļ/02.ļ/01./4.�.xls

Resource

win10v2004-20220901-en

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral25

Sample

K1-3K2-2ؿбļ/02.ļ/01./4.�.pdf

Resource

win7-20221111-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

K1-3K2-2ؿбļ/02.ļ/01./4.�.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral27

Sample

K1-3K2-2ؿбļ/02.ļ/01./4.�.doc

Resource

win7-20220812-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral28

Sample

K1-3K2-2ؿбļ/02.ļ/01./4.�.doc

Resource

win10v2004-20221111-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

K1-3K2-2ؿбļ/02.ļ/01./4.�.xls

Resource

win7-20221111-en

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral30

Sample

K1-3K2-2ؿбļ/02.ļ/01./4.�.xls

Resource

win10v2004-20221111-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

K1-3K2-2ؿбļ/02.ļ/01./4.�.pdf

Resource

win7-20220901-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

K1-3K2-2ؿбļ/02.ļ/01./4.�.pdf

Resource

win10v2004-20220812-en

windows10-2004-x64

6 signatures

150 seconds

Report Analysis Logs

General

Target

K1-3K2-2ؿбļ/02.ļ/01./4.�.xls
Size

188KB
MD5

66f85cabd399b02d8556444f6300d8b0
SHA1

846d9a8a90bc8d762798b8b5f0f7ac9fef190c1b
SHA256

46ba5abd46413c18bfee0a5cd797587c335baa4d6fde4ad35742174925598de1
SHA512

305945cdb0b19257c9e99f28b84cdee55a1b59c7039ee7a67841549291de433f763321b401127716791fb49a8df8a845cde58cbb70068d62e732f8bb31afae82
SSDEEP

3072:Yhq1gxv7yZmspH7+cclKisbqb+xTENDiVWxqg7yf7pFrSMW+56eOTWVbrzQ7ITkV:D1gxv7yZmspH7+cclKisbqb+xTENDiVp

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\K1-3K2-2ؿбļ\02.ļ\01.\4.�.xls"
1⤵
PID:5044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5044-132-0x00007FFAD9750000-0x00007FFAD9760000-memory.dmp

Filesize
64KB

Download
memory/5044-133-0x00007FFAD9750000-0x00007FFAD9760000-memory.dmp

Filesize
64KB

Download
memory/5044-134-0x00007FFAD9750000-0x00007FFAD9760000-memory.dmp

Filesize
64KB

Download
memory/5044-135-0x00007FFAD9750000-0x00007FFAD9760000-memory.dmp

Filesize
64KB

Download
memory/5044-136-0x00007FFAD9750000-0x00007FFAD9760000-memory.dmp

Filesize
64KB

Download