Analysis

  • max time kernel
    0s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231130-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-12-2023 16:34

General

  • Target

    comprobante.xlam

  • Size

    677KB

  • MD5

    e80d7b0d84d9813bbc036baf7070b8e2

  • SHA1

    19d8a69fb20ecc14e6b2fc3a48d5781b9a5deece

  • SHA256

    c257a8f4249d22d5f0250b80d0822fa437183f70123d2a7175330f8a34a278cb

  • SHA512

    6c905815e8fe63fe1e926238ec456b842e423cc4817098ef374f1c98645bfbea10c90e5af29d8ee9673bd9357a81dbcfce806579c7c644524eb420713155c858

  • SSDEEP

    12288:LWcIIO6L8S0N5nukjjdIf0166RHf8xvhj+LvweiUeXPlgCwVgXNJi8zlj2fW:LWqLehjjygf8thYvkU6PB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\comprobante.xlam"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:2596

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2596-2-0x00007FF991CB0000-0x00007FF991CC0000-memory.dmp

    Filesize

    64KB

  • memory/2596-6-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-5-0x00007FF991CB0000-0x00007FF991CC0000-memory.dmp

    Filesize

    64KB

  • memory/2596-4-0x00007FF991CB0000-0x00007FF991CC0000-memory.dmp

    Filesize

    64KB

  • memory/2596-7-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-8-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-12-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-15-0x00007FF98F720000-0x00007FF98F730000-memory.dmp

    Filesize

    64KB

  • memory/2596-16-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-17-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-18-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-14-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-13-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-11-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-19-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-10-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-9-0x00007FF98F720000-0x00007FF98F730000-memory.dmp

    Filesize

    64KB

  • memory/2596-20-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-21-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-22-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-3-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-1-0x00007FF991CB0000-0x00007FF991CC0000-memory.dmp

    Filesize

    64KB

  • memory/2596-0-0x00007FF991CB0000-0x00007FF991CC0000-memory.dmp

    Filesize

    64KB

  • memory/2596-34-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-52-0x00007FF991CB0000-0x00007FF991CC0000-memory.dmp

    Filesize

    64KB

  • memory/2596-55-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-54-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-53-0x00007FF9D1C30000-0x00007FF9D1E25000-memory.dmp

    Filesize

    2.0MB

  • memory/2596-51-0x00007FF991CB0000-0x00007FF991CC0000-memory.dmp

    Filesize

    64KB

  • memory/2596-50-0x00007FF991CB0000-0x00007FF991CC0000-memory.dmp

    Filesize

    64KB

  • memory/2596-49-0x00007FF991CB0000-0x00007FF991CC0000-memory.dmp

    Filesize

    64KB