Analysis

  • max time kernel
    139s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/08/2023, 14:30

General

  • Target

    SHIPPING DOC.xlam

  • Size

    712KB

  • MD5

    15001e69702b5cbbe9d3fc6e43b12097

  • SHA1

    8e493f2fd24285832fae22491cd07a8c3853f015

  • SHA256

    085555bf9e9abd741fd446a3112a4798dc576de3bede8ef872e87e14c270ef34

  • SHA512

    23403612d49f55938f89ca0f91299318d69be55c947e2c43a605992bf5821f6b207102687a05a0cf39588811380b16889be7af5087971622d14e13c605816e8d

  • SSDEEP

    12288:zXnWDA93WCrvU8jbH1LA68SQEnrRxUWZpwdTeISGGryQOHPMvtaZ5LtFV69bWigw:bH93NUeRU6FZrRxUWodKISG6yQOvsYZO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\SHIPPING DOC.xlam"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:4644

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4644-133-0x00007FFEDE170000-0x00007FFEDE180000-memory.dmp

          Filesize

          64KB

        • memory/4644-134-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-135-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-137-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-138-0x00007FFEDE170000-0x00007FFEDE180000-memory.dmp

          Filesize

          64KB

        • memory/4644-139-0x00007FFEDE170000-0x00007FFEDE180000-memory.dmp

          Filesize

          64KB

        • memory/4644-136-0x00007FFEDE170000-0x00007FFEDE180000-memory.dmp

          Filesize

          64KB

        • memory/4644-140-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-141-0x00007FFEDE170000-0x00007FFEDE180000-memory.dmp

          Filesize

          64KB

        • memory/4644-142-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-143-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-144-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-145-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-146-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-147-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-148-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-149-0x00007FFEDBF00000-0x00007FFEDBF10000-memory.dmp

          Filesize

          64KB

        • memory/4644-150-0x00007FFEDBF00000-0x00007FFEDBF10000-memory.dmp

          Filesize

          64KB

        • memory/4644-152-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-153-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-154-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-155-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-156-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-157-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-158-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-159-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-160-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-161-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-162-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-163-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-164-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-165-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB

        • memory/4644-187-0x00007FFEDE170000-0x00007FFEDE180000-memory.dmp

          Filesize

          64KB

        • memory/4644-186-0x00007FFEDE170000-0x00007FFEDE180000-memory.dmp

          Filesize

          64KB

        • memory/4644-188-0x00007FFEDE170000-0x00007FFEDE180000-memory.dmp

          Filesize

          64KB

        • memory/4644-189-0x00007FFEDE170000-0x00007FFEDE180000-memory.dmp

          Filesize

          64KB

        • memory/4644-190-0x00007FFF1E0F0000-0x00007FFF1E2E5000-memory.dmp

          Filesize

          2.0MB