785750327c82ef625d92581cbea386853b22db6a25ccb040515644333facdd2c | Triage

Analysis

max time kernel
121s
max time network
129s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
18/08/2023, 17:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

RFx- 6200238509.xlsx
Size

134KB
MD5

6a8b32846eadff733b773412a349d7d8
SHA1

8fa7b7b0b12265c637c3722c1d560af46ad38f5e
SHA256

785750327c82ef625d92581cbea386853b22db6a25ccb040515644333facdd2c
SHA512

af7fb6b71efa64cc2e48791addd5b5d95eae1b5c8a6f494bcf20646835e66a2a41cc7df290f4cb81ddeb403ebfbcb7e95bbe0f42fb586b56d7e637327708dbd4
SSDEEP

3072:xJhi06JulOGKSYN2dc+rRfPQDEqTok2o8tepk:xJh/6uOjSYN2dc+rRfPQoTBtak

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
2460	EXCEL.EXE

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2460	EXCEL.EXE
2460	EXCEL.EXE
2460	EXCEL.EXE
2460	EXCEL.EXE

C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde "C:\Users\Admin\AppData\Local\Temp\RFx- 6200238509.xlsx"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2460-54-0x000000005FFF0000-0x0000000060000000-memory.dmp

Filesize
64KB

Download
memory/2460-55-0x00000000738DD000-0x00000000738E8000-memory.dmp

Filesize
44KB

Download
memory/2460-58-0x00000000738DD000-0x00000000738E8000-memory.dmp

Filesize
44KB

Download