Analysis

  • max time kernel
    0s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/10/2023, 09:05

General

  • Target

    INV-AWB 4400008465 - BS.xlam

  • Size

    736KB

  • MD5

    8fa1f9e46e207fdfa4c0e8d7003077e8

  • SHA1

    a741123623a834ed92409865a7d5bf1eb1ec648d

  • SHA256

    05043fcca50e25b160798b41a6443526b76f7c8501995f5ca59bbf39ce9b3d4d

  • SHA512

    8e5fe59e70fc73af4fecce7ce927a3c8f7cdd52407cee808fd0a9011a468c21ed78ddb7cd118a49ed41e50f0f6408a290efa6b42f8fe0a552f31e25173f40db2

  • SSDEEP

    12288:GWMnWY3ikHSNKk0Z548w175UD6kWJJb15zFHtam1W2AySB61uulhrSbGYx2QZyoO:nMLCg+KuRJJb7BAyJ1xl1SbGmyEUsRK/

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\INV-AWB 4400008465 - BS.xlam"
    1⤵
      PID:4672

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/4672-0-0x00007FF88D730000-0x00007FF88D740000-memory.dmp

            Filesize

            64KB

          • memory/4672-1-0x00007FF8CD6B0000-0x00007FF8CD8A5000-memory.dmp

            Filesize

            2.0MB