Analysis

  • max time kernel
    138s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-08-2023 01:44

General

  • Target

    fc827d0192f306a883a34b6e3a126ee398d98e6bb9b7cd6d549ed3e316d553c9.xlam

  • Size

    1.1MB

  • MD5

    8596666635944f948a32b4247be77209

  • SHA1

    162c543cb26b552e7e283c89dc624cfa9458d929

  • SHA256

    fc827d0192f306a883a34b6e3a126ee398d98e6bb9b7cd6d549ed3e316d553c9

  • SHA512

    76ac60f6ca0b160bc5883cf143a2c080346454c6fad6895c8d6a2c8c964c1276a64aa481e2a18515acbb23981d7c6422e44768621f2cd0597f62300e044e6a3b

  • SSDEEP

    12288:akeG411Ie6y67lvHPK2JW9p/4hEK0zPKPw3nL+0RsUHoH0tT/M2ZZuj5/2jdcNot:aF56y6k2JMp4EK0EwvM0F/MDR2jGNot

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\fc827d0192f306a883a34b6e3a126ee398d98e6bb9b7cd6d549ed3e316d553c9.xlam"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:1712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1712-133-0x00007FF803490000-0x00007FF8034A0000-memory.dmp

    Filesize

    64KB

  • memory/1712-134-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-136-0x00007FF803490000-0x00007FF8034A0000-memory.dmp

    Filesize

    64KB

  • memory/1712-135-0x00007FF803490000-0x00007FF8034A0000-memory.dmp

    Filesize

    64KB

  • memory/1712-137-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-138-0x00007FF803490000-0x00007FF8034A0000-memory.dmp

    Filesize

    64KB

  • memory/1712-140-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-139-0x00007FF803490000-0x00007FF8034A0000-memory.dmp

    Filesize

    64KB

  • memory/1712-141-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-142-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-143-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-144-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-145-0x00007FF8010D0000-0x00007FF8010E0000-memory.dmp

    Filesize

    64KB

  • memory/1712-146-0x00007FF8010D0000-0x00007FF8010E0000-memory.dmp

    Filesize

    64KB

  • memory/1712-148-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-147-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-149-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-151-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-150-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-152-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-153-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-154-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-155-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-157-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-158-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-162-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB

  • memory/1712-177-0x00007FF803490000-0x00007FF8034A0000-memory.dmp

    Filesize

    64KB

  • memory/1712-178-0x00007FF803490000-0x00007FF8034A0000-memory.dmp

    Filesize

    64KB

  • memory/1712-179-0x00007FF803490000-0x00007FF8034A0000-memory.dmp

    Filesize

    64KB

  • memory/1712-180-0x00007FF803490000-0x00007FF8034A0000-memory.dmp

    Filesize

    64KB

  • memory/1712-181-0x00007FF843410000-0x00007FF843605000-memory.dmp

    Filesize

    2.0MB