Analysis

  • max time kernel
    90s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14-02-2023 08:27

General

  • Target

    ap-file-xlwings.xlam-535029977.zip

  • Size

    230KB

  • MD5

    6510a281d038c69953896bb73a34a476

  • SHA1

    bc7697214b50767fe563b7d499dff67be7d2936c

  • SHA256

    aea50f690cdc2bb461705c6387a3ddde90049b7ea059881550d103eb6455b1bb

  • SHA512

    f191c56481358d51d4fc5f4fa17b265782ed993b0a98feaccdb2019ba00cf73958005aea6afbd29de1515f566dcab583a2c20b8b18d27ea5b90a585492108eb1

  • SSDEEP

    6144:OLef03hEsZCpJY78oyksUooNnBQSUD3EVxaTjCIxC+XdKvo:g3s7Y78oyksUvN2S8So2IlXdL

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\ap-file-xlwings.xlam-535029977.zip
    1⤵
      PID:4572
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:4400

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads