Analysis

  • max time kernel
    368s
  • max time network
    457s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-11-2022 08:45

General

  • Target

    29ef17de7f62c12e63e0309fe9a92ac56fb3058b6987562abd70ce973cfd4321.xls

  • Size

    92KB

  • MD5

    bc70764d03cdb9e235bd877bdde9a910

  • SHA1

    21c220ded4df616568d0bfeceb42314d91b99830

  • SHA256

    29ef17de7f62c12e63e0309fe9a92ac56fb3058b6987562abd70ce973cfd4321

  • SHA512

    225f1b75a9903bc51ffa49e66fbd3620883997e7ebb9ab7cf29bccf90034d53307014633bca2b757d631cc8c0e438c4fd89cba1a39a2acf4b8ea96adb88dd400

  • SSDEEP

    1536:9ssssAGNUrXQKukWOqYJdJOlG1ba02jcc0lbxOqTgZ5M88gcJtXwmGbD0:Qgl22jcc0lbxOK7jzJtXwDD0

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\29ef17de7f62c12e63e0309fe9a92ac56fb3058b6987562abd70ce973cfd4321.xls"
    1⤵
      PID:4024

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4024-132-0x00007FFAD12F0000-0x00007FFAD1300000-memory.dmp
      Filesize

      64KB

    • memory/4024-133-0x00007FFAD12F0000-0x00007FFAD1300000-memory.dmp
      Filesize

      64KB

    • memory/4024-134-0x00007FFAD12F0000-0x00007FFAD1300000-memory.dmp
      Filesize

      64KB

    • memory/4024-135-0x00007FFAD12F0000-0x00007FFAD1300000-memory.dmp
      Filesize

      64KB

    • memory/4024-136-0x00007FFAD12F0000-0x00007FFAD1300000-memory.dmp
      Filesize

      64KB

    • memory/4024-137-0x00007FFACEF40000-0x00007FFACEF50000-memory.dmp
      Filesize

      64KB