5c34c14865f4a98f6cc623710e445f479175aeafafcb55614b139fb61cff9de7

Analysis

max time kernel
142s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
26-08-2023 19:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

decrypted.xlsx
Size

2.1MB
MD5

711fe9b027c5f6e0cfd51694b69da120
SHA1

b32c2e1b63aaba1103d2f9b38dfa39c6b9cc2780
SHA256

4e05084fe9a60bba11a1b0941b4264d8dbebc30be1630a06f05f86c4466b1510
SHA512

33405b40dbbae9294c3df14a22545e0ae8a9acc26cac69ea6d6e6c00138105e1fc4523352169187a1fa969a7b455eadcc35d52bb1048d365b3007722607d06ed
SSDEEP

49152:xaphEoOdnowYVpoDzFNnyKfENk1HA3p5PGeRgcT1Md3Qvpmd:Av2lapmffIka3pZlTWOpmd

Score

1^/10

Malware Config

Signatures

Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

EXCEL.EXE

pid process

1576 EXCEL.EXE
Suspicious use of FindShellTrayWindow 2 IoCs

Processes:

EXCEL.EXE

pid process

1576 EXCEL.EXE
1576 EXCEL.EXE

Suspicious use of SetWindowsHookEx 12 IoCs

Processes:

EXCEL.EXE

pid	process
1576	EXCEL.EXE
1576	EXCEL.EXE
1576	EXCEL.EXE
1576	EXCEL.EXE
1576	EXCEL.EXE
1576	EXCEL.EXE
1576	EXCEL.EXE
1576	EXCEL.EXE
1576	EXCEL.EXE
1576	EXCEL.EXE
1576	EXCEL.EXE
1576	EXCEL.EXE

C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\decrypted.xlsx"
1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:1576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1576-1-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-0-0x00007FFD9DAB0000-0x00007FFD9DAC0000-memory.dmp

Filesize
64KB

Download
memory/1576-2-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-3-0x00007FFD9DAB0000-0x00007FFD9DAC0000-memory.dmp

Filesize
64KB

Download
memory/1576-5-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-6-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-4-0x00007FFD9DAB0000-0x00007FFD9DAC0000-memory.dmp

Filesize
64KB

Download
memory/1576-8-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-7-0x00007FFD9DAB0000-0x00007FFD9DAC0000-memory.dmp

Filesize
64KB

Download
memory/1576-9-0x00007FFD9DAB0000-0x00007FFD9DAC0000-memory.dmp

Filesize
64KB

Download
memory/1576-10-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-11-0x00007FFD9B150000-0x00007FFD9B160000-memory.dmp

Filesize
64KB

Download
memory/1576-12-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-13-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-14-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-15-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-16-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-18-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-19-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-17-0x00007FFD9B150000-0x00007FFD9B160000-memory.dmp

Filesize
64KB

Download
memory/1576-24-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-25-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-49-0x00007FFD9DAB0000-0x00007FFD9DAC0000-memory.dmp

Filesize
64KB

Download
memory/1576-50-0x00007FFD9DAB0000-0x00007FFD9DAC0000-memory.dmp

Filesize
64KB

Download
memory/1576-51-0x00007FFD9DAB0000-0x00007FFD9DAC0000-memory.dmp

Filesize
64KB

Download
memory/1576-52-0x00007FFD9DAB0000-0x00007FFD9DAC0000-memory.dmp

Filesize
64KB

Download
memory/1576-53-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-55-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download
memory/1576-54-0x00007FFDDDA30000-0x00007FFDDDC25000-memory.dmp

Filesize
2.0MB

Download