Analysis

  • max time kernel
    153s
  • max time network
    191s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-11-2022 19:26

General

  • Target

    Ҵֱ20%ϵ//K4ؿܰ1�.xls

  • Size

    109KB

  • MD5

    51958a938144cc12f9b140c5c116d163

  • SHA1

    a8a00ef6e8d9666c3663c48d2f9106a20d7245bf

  • SHA256

    024fb905d8bb1d7ee44394c426edcbc11bb1b3ce85f27bf1e9fb2f5581a61d32

  • SHA512

    861355597ad2260cdf086ecd61298b48f3f59c3410fbfbac5004351d7174e41bca98283a27f8bfd399eb5964ad7bcbb793d575bcf51632482e92df569d56bbfd

  • SSDEEP

    1536:Pvvvqei5iecV9+iFU8j1VvaTbiGw2/v9Izri5vqgiecV9+5FU8j1Vv39IzrwZNyx:mZNufgkLkqmc3LVfyG7VizMs0zz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Ҵֱ20%ϵ\\K4ؿܰ1�.xls"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:4208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4208-132-0x00007FF8314D0000-0x00007FF8314E0000-memory.dmp
    Filesize

    64KB

  • memory/4208-134-0x00007FF8314D0000-0x00007FF8314E0000-memory.dmp
    Filesize

    64KB

  • memory/4208-133-0x00007FF8314D0000-0x00007FF8314E0000-memory.dmp
    Filesize

    64KB

  • memory/4208-136-0x00007FF8314D0000-0x00007FF8314E0000-memory.dmp
    Filesize

    64KB

  • memory/4208-135-0x00007FF8314D0000-0x00007FF8314E0000-memory.dmp
    Filesize

    64KB

  • memory/4208-137-0x00007FF82F050000-0x00007FF82F060000-memory.dmp
    Filesize

    64KB

  • memory/4208-138-0x00007FF82F050000-0x00007FF82F060000-memory.dmp
    Filesize

    64KB