Analysis

  • max time kernel
    139s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/08/2023, 06:50

General

  • Target

    Fiji Islands Specification List .xls

  • Size

    1.0MB

  • MD5

    87f8f019ab0250cae5eb5b62f1665dbb

  • SHA1

    760917d89c6868a30eba3fadb2d97febf71fc28e

  • SHA256

    37e861a2a9ff1d219537545e830600be1ca0dc20af309611d4f7b5aa83a01491

  • SHA512

    21f36f9af37ddb9e0a7eecbc9d1a19eacb453a80a255fa1a52f9a9d953a928e851325fb216f9b1fed28afa4730101bf276c1511c7aa3757d868363976b175044

  • SSDEEP

    24576:WRZyQw6VfZy9w6V4jKaWlEzp7a39dlzZbtQA3Qp5EfIwMx:WbQ6VRB6V4jKjOzedHt/3XfI/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Fiji Islands Specification List .xls"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:2216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\AA2B2309.emf

    Filesize

    1.4MB

    MD5

    d69c22a341e111feea69df6d8c655d60

    SHA1

    ac862337f2efa43627508927f5052ce694012206

    SHA256

    05b2053bf1d070d6034b45cd79b54d80da3c6d88d016671a345e75048b1a68db

    SHA512

    d4db33ed046b3c9ba09c4b3feac17b1fe2e75fce67f4154fd795d504708c295a1e3c8331ed3d6c3ee9950c936c4cc25b5d690558c26f2e1f7771bd5eb275822c

  • memory/2216-161-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-163-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-137-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-135-0x00007FFEEB070000-0x00007FFEEB080000-memory.dmp

    Filesize

    64KB

  • memory/2216-138-0x00007FFEEB070000-0x00007FFEEB080000-memory.dmp

    Filesize

    64KB

  • memory/2216-139-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-140-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-142-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-141-0x00007FFEEB070000-0x00007FFEEB080000-memory.dmp

    Filesize

    64KB

  • memory/2216-143-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-144-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-145-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-146-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-147-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-148-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-149-0x00007FFEE8CE0000-0x00007FFEE8CF0000-memory.dmp

    Filesize

    64KB

  • memory/2216-150-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-134-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-152-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-153-0x00007FFEE8CE0000-0x00007FFEE8CF0000-memory.dmp

    Filesize

    64KB

  • memory/2216-136-0x00007FFEEB070000-0x00007FFEEB080000-memory.dmp

    Filesize

    64KB

  • memory/2216-160-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-151-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-164-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-165-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-166-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-167-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-168-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-169-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-170-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-171-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-172-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-173-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-174-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-176-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-175-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-177-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB

  • memory/2216-133-0x00007FFEEB070000-0x00007FFEEB080000-memory.dmp

    Filesize

    64KB

  • memory/2216-210-0x00007FFEEB070000-0x00007FFEEB080000-memory.dmp

    Filesize

    64KB

  • memory/2216-211-0x00007FFEEB070000-0x00007FFEEB080000-memory.dmp

    Filesize

    64KB

  • memory/2216-212-0x00007FFEEB070000-0x00007FFEEB080000-memory.dmp

    Filesize

    64KB

  • memory/2216-213-0x00007FFEEB070000-0x00007FFEEB080000-memory.dmp

    Filesize

    64KB

  • memory/2216-214-0x00007FFF2AFF0000-0x00007FFF2B1E5000-memory.dmp

    Filesize

    2.0MB