Analysis
-
max time kernel
139s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
08/08/2023, 06:50
Static task
static1
Behavioral task
behavioral1
Sample
Fiji Islands Specification List .xls
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Fiji Islands Specification List .xls
Resource
win10v2004-20230703-en
General
-
Target
Fiji Islands Specification List .xls
-
Size
1.0MB
-
MD5
87f8f019ab0250cae5eb5b62f1665dbb
-
SHA1
760917d89c6868a30eba3fadb2d97febf71fc28e
-
SHA256
37e861a2a9ff1d219537545e830600be1ca0dc20af309611d4f7b5aa83a01491
-
SHA512
21f36f9af37ddb9e0a7eecbc9d1a19eacb453a80a255fa1a52f9a9d953a928e851325fb216f9b1fed28afa4730101bf276c1511c7aa3757d868363976b175044
-
SSDEEP
24576:WRZyQw6VfZy9w6V4jKaWlEzp7a39dlzZbtQA3Qp5EfIwMx:WbQ6VRB6V4jKjOzedHt/3XfI/
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 2216 EXCEL.EXE -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2216 EXCEL.EXE 2216 EXCEL.EXE -
Suspicious use of SetWindowsHookEx 12 IoCs
pid Process 2216 EXCEL.EXE 2216 EXCEL.EXE 2216 EXCEL.EXE 2216 EXCEL.EXE 2216 EXCEL.EXE 2216 EXCEL.EXE 2216 EXCEL.EXE 2216 EXCEL.EXE 2216 EXCEL.EXE 2216 EXCEL.EXE 2216 EXCEL.EXE 2216 EXCEL.EXE
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Fiji Islands Specification List .xls"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:2216
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD5d69c22a341e111feea69df6d8c655d60
SHA1ac862337f2efa43627508927f5052ce694012206
SHA25605b2053bf1d070d6034b45cd79b54d80da3c6d88d016671a345e75048b1a68db
SHA512d4db33ed046b3c9ba09c4b3feac17b1fe2e75fce67f4154fd795d504708c295a1e3c8331ed3d6c3ee9950c936c4cc25b5d690558c26f2e1f7771bd5eb275822c