Analysis

  • max time kernel
    125s
  • max time network
    137s
  • platform
    windows10-1703_x64
  • resource
    win10-20230703-en
  • resource tags

    arch:x64arch:x86image:win10-20230703-enlocale:en-usos:windows10-1703-x64system
  • submitted
    18-08-2023 17:25

General

  • Target

    RFx- 6200238509.xlsx

  • Size

    134KB

  • MD5

    6a8b32846eadff733b773412a349d7d8

  • SHA1

    8fa7b7b0b12265c637c3722c1d560af46ad38f5e

  • SHA256

    785750327c82ef625d92581cbea386853b22db6a25ccb040515644333facdd2c

  • SHA512

    af7fb6b71efa64cc2e48791addd5b5d95eae1b5c8a6f494bcf20646835e66a2a41cc7df290f4cb81ddeb403ebfbcb7e95bbe0f42fb586b56d7e637327708dbd4

  • SSDEEP

    3072:xJhi06JulOGKSYN2dc+rRfPQDEqTok2o8tepk:xJh/6uOjSYN2dc+rRfPQoTBtak

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\RFx- 6200238509.xlsx"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:5088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5088-122-0x00007FFEBC2B0000-0x00007FFEBC2C0000-memory.dmp

    Filesize

    64KB

  • memory/5088-123-0x00007FFEFC220000-0x00007FFEFC3FB000-memory.dmp

    Filesize

    1.9MB

  • memory/5088-124-0x00007FFEBC2B0000-0x00007FFEBC2C0000-memory.dmp

    Filesize

    64KB

  • memory/5088-125-0x00007FFEFC220000-0x00007FFEFC3FB000-memory.dmp

    Filesize

    1.9MB

  • memory/5088-126-0x00007FFEBC2B0000-0x00007FFEBC2C0000-memory.dmp

    Filesize

    64KB

  • memory/5088-127-0x00007FFEBC2B0000-0x00007FFEBC2C0000-memory.dmp

    Filesize

    64KB

  • memory/5088-128-0x00007FFEFC220000-0x00007FFEFC3FB000-memory.dmp

    Filesize

    1.9MB

  • memory/5088-131-0x00007FFEFC220000-0x00007FFEFC3FB000-memory.dmp

    Filesize

    1.9MB

  • memory/5088-132-0x00007FFEFC220000-0x00007FFEFC3FB000-memory.dmp

    Filesize

    1.9MB

  • memory/5088-133-0x00007FFEFC220000-0x00007FFEFC3FB000-memory.dmp

    Filesize

    1.9MB

  • memory/5088-136-0x00007FFEFC220000-0x00007FFEFC3FB000-memory.dmp

    Filesize

    1.9MB

  • memory/5088-139-0x00007FFEFB000000-0x00007FFEFB0AE000-memory.dmp

    Filesize

    696KB

  • memory/5088-142-0x00007FFEFC220000-0x00007FFEFC3FB000-memory.dmp

    Filesize

    1.9MB

  • memory/5088-143-0x00007FFEB8970000-0x00007FFEB8980000-memory.dmp

    Filesize

    64KB

  • memory/5088-144-0x00007FFEFC220000-0x00007FFEFC3FB000-memory.dmp

    Filesize

    1.9MB

  • memory/5088-145-0x00007FFEFC220000-0x00007FFEFC3FB000-memory.dmp

    Filesize

    1.9MB

  • memory/5088-146-0x00007FFEB8970000-0x00007FFEB8980000-memory.dmp

    Filesize

    64KB

  • memory/5088-299-0x00007FFEFC220000-0x00007FFEFC3FB000-memory.dmp

    Filesize

    1.9MB

  • memory/5088-300-0x00007FFEFC220000-0x00007FFEFC3FB000-memory.dmp

    Filesize

    1.9MB

  • memory/5088-301-0x00007FFEFB000000-0x00007FFEFB0AE000-memory.dmp

    Filesize

    696KB

  • memory/5088-335-0x00007FFEBC2B0000-0x00007FFEBC2C0000-memory.dmp

    Filesize

    64KB

  • memory/5088-336-0x00007FFEBC2B0000-0x00007FFEBC2C0000-memory.dmp

    Filesize

    64KB

  • memory/5088-338-0x00007FFEBC2B0000-0x00007FFEBC2C0000-memory.dmp

    Filesize

    64KB

  • memory/5088-337-0x00007FFEBC2B0000-0x00007FFEBC2C0000-memory.dmp

    Filesize

    64KB

  • memory/5088-339-0x00007FFEFC220000-0x00007FFEFC3FB000-memory.dmp

    Filesize

    1.9MB

  • memory/5088-340-0x00007FFEFB000000-0x00007FFEFB0AE000-memory.dmp

    Filesize

    696KB