Analysis

  • max time kernel
    317s
  • max time network
    345s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 08:10

General

  • Target

    a5fafe29b2e872eb9fd5cf545fdfee17b1d0f636e5d0db0227c5116b9c5a1868.xls

  • Size

    1.0MB

  • MD5

    65ec993d799cd0651db5240a3e93dac4

  • SHA1

    a70b4d08f1b98fe556b86e69302ae90f4c8b947a

  • SHA256

    a5fafe29b2e872eb9fd5cf545fdfee17b1d0f636e5d0db0227c5116b9c5a1868

  • SHA512

    5fcf6686f83255dacc7a1fbcde730e1209815b99f71592c6ee2c4c311032a70034d19eed830ff553c7722a3177c0e7b840788e5d973aebc455c6b3587c3f833c

  • SSDEEP

    24576:kr5XXXXXXXXXXXXUXXXXXXXSXXXXXXXXimIr5XXXXXXXXXXXXUXXXXXXXSXXXXXf:

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\a5fafe29b2e872eb9fd5cf545fdfee17b1d0f636e5d0db0227c5116b9c5a1868.xls"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:3992

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3992-132-0x00007FFE28930000-0x00007FFE28940000-memory.dmp

          Filesize

          64KB

        • memory/3992-134-0x00007FFE28930000-0x00007FFE28940000-memory.dmp

          Filesize

          64KB

        • memory/3992-133-0x00007FFE28930000-0x00007FFE28940000-memory.dmp

          Filesize

          64KB

        • memory/3992-135-0x00007FFE28930000-0x00007FFE28940000-memory.dmp

          Filesize

          64KB

        • memory/3992-136-0x00007FFE28930000-0x00007FFE28940000-memory.dmp

          Filesize

          64KB

        • memory/3992-137-0x00007FFE26440000-0x00007FFE26450000-memory.dmp

          Filesize

          64KB

        • memory/3992-138-0x00007FFE26440000-0x00007FFE26450000-memory.dmp

          Filesize

          64KB