Analysis

  • max time kernel
    179s
  • max time network
    223s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-11-2022 19:29

General

  • Target

    ··/аӴ/аӴ��.xls

  • Size

    18KB

  • MD5

    1082ba577dbc93caa43737c100288187

  • SHA1

    c9308ac89499d2e8c82eeba4d3949fee86ed3357

  • SHA256

    50cf53bbf615552ea756e999e3432911111118b56d20253d87dfe264876e125b

  • SHA512

    0bafafa096964431f8262109cd6d135f0d9762aeafe580155aadd2c2d78941757aaf02d93cee1d7a3a1eb50ba0df8308caefc8605376c383ff8faeef68606946

  • SSDEEP

    384:gBBxE3r8gNIjFTLtVxwMxrSYa+bTs2Zd8Nh8TwUioemUgjECtmMKsNXAKHy+SfC5:gBBxE3r8gNIjFTLtVxwMxrSYa+bTs2Zr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\··\аӴ\аӴ��.xls"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/436-132-0x00007FFB04130000-0x00007FFB04140000-memory.dmp
    Filesize

    64KB

  • memory/436-133-0x00007FFB04130000-0x00007FFB04140000-memory.dmp
    Filesize

    64KB

  • memory/436-134-0x00007FFB04130000-0x00007FFB04140000-memory.dmp
    Filesize

    64KB

  • memory/436-135-0x00007FFB04130000-0x00007FFB04140000-memory.dmp
    Filesize

    64KB

  • memory/436-136-0x00007FFB04130000-0x00007FFB04140000-memory.dmp
    Filesize

    64KB

  • memory/436-137-0x00007FFB01E50000-0x00007FFB01E60000-memory.dmp
    Filesize

    64KB

  • memory/436-138-0x00007FFB01E50000-0x00007FFB01E60000-memory.dmp
    Filesize

    64KB