Analysis
-
max time kernel
150s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
27-11-2022 02:57
General
-
Target
ͬļ/3.¼2 ŵ飨2һŵ.xls
-
Size
30KB
-
MD5
7cc3b02c9b0b54572dfe83339de3efc6
-
SHA1
5eb7b872478b8033188e6285a77d6fd6f1791f14
-
SHA256
c39a4fc466051b75636a9fe2c348691d8d864c000c8c7f584e583464cdd72cfd
-
SHA512
ba8c30008219a1e7310eb4425d5adb7c52f6ed27ec1fe1aa33b85859e582ea4df5352e5173f99736a33230fe8d277bbb2793a46f88a1f0dd9b082e23515eb39e
-
SSDEEP
768:ROOOO67Dy1SNG1HrTCi9SGxRICqzLvT2MxQn6v7yZmspH7+7alMiEZClsPI4ukox:ROOOO67Dy1SNG1HrTCi9SGxRICqz9xQJ
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\ͬļ\3.¼2 ŵ飨2һŵ.xls"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4340-132-0x00007FFC784B0000-0x00007FFC784C0000-memory.dmpFilesize
64KB
-
memory/4340-133-0x00007FFC784B0000-0x00007FFC784C0000-memory.dmpFilesize
64KB
-
memory/4340-134-0x00007FFC784B0000-0x00007FFC784C0000-memory.dmpFilesize
64KB
-
memory/4340-135-0x00007FFC784B0000-0x00007FFC784C0000-memory.dmpFilesize
64KB
-
memory/4340-136-0x00007FFC784B0000-0x00007FFC784C0000-memory.dmpFilesize
64KB
-
memory/4340-137-0x00007FFC762F0000-0x00007FFC76300000-memory.dmpFilesize
64KB
-
memory/4340-138-0x00007FFC762F0000-0x00007FFC76300000-memory.dmpFilesize
64KB