Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
30/08/2023, 05:57
General
-
Target
shipping documents #241523.xlam
-
Size
615KB
-
MD5
075a717494e75da126d38c80929b6bff
-
SHA1
522363744c2aa4e34a155c37d3181d97cf82ba42
-
SHA256
9827d6a8c50f7557114435e88b83cfb371f0e2a104dcf1cfb26e228e386a6dd7
-
SHA512
91394bd96558b8a96c2c2a7223c1e85e8260569d518a9e330971d421dee4bf7382f65c41a8acae33e98e3ce2c070f3e80535a0aeaaf87e002cd37f45dc23cebd
-
SSDEEP
12288:r0tfI1RlQ5DG6XylblNlMVotT2g8TAla0nOgGaKyKYQzB9TejfLHWHkepTjX:r09rQ6CbM692gKA0jvcKjV9TgTvQX
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\shipping documents #241523.xlam"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB