Overview

overview

10

Static

static

8

230f2440ca...31.xls

windows7-x64

10

230f2440ca...31.xls

windows10-2004-x64

1

Analysis

  • max time kernel
    400s
  • max time network
    410s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-11-2022 13:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    230f2440cae2e6043452633c6c24b3f2b00e5c93b001dad0bbe6e07de7970c31.xls

  • Size

    99KB

  • MD5

    52338081a81611fafc39497f4dd3f98d

  • SHA1

    cfc7b06e180cb808daec1f99fa27533b4637db78

  • SHA256

    230f2440cae2e6043452633c6c24b3f2b00e5c93b001dad0bbe6e07de7970c31

  • SHA512

    5facb8c1ef8fc510c080b624106a89bd915bd04165fe37d314d4ae6afbdf2f586554876a5010ddf14ad128bb838c0e7aecb5bada33eb7a1746028381b7d7d937

  • SSDEEP

    1536:kiii00WiagiB37DyGxZWiFFkmePg0NIZ95DcBSmiWVbrzQ7Il85MsnkbA2396hYf:1NycBSvWVbrzQ7INIkZ42AJtXwJT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\230f2440cae2e6043452633c6c24b3f2b00e5c93b001dad0bbe6e07de7970c31.xls"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:3092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3092-132-0x00007FFE5C9B0000-0x00007FFE5C9C0000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3092-133-0x00007FFE5C9B0000-0x00007FFE5C9C0000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3092-134-0x00007FFE5C9B0000-0x00007FFE5C9C0000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3092-135-0x00007FFE5C9B0000-0x00007FFE5C9C0000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3092-136-0x00007FFE5C9B0000-0x00007FFE5C9C0000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3092-137-0x00007FFE5A850000-0x00007FFE5A860000-memory.dmp
    Filesize

    64KB

    Download
  • memory/3092-138-0x00007FFE5A850000-0x00007FFE5A860000-memory.dmp
    Filesize

    64KB

    Download