Analysis

  • max time kernel
    0s
  • max time network
    103s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-12-2023 07:28

General

  • Target

    5c89641916e4e3a6a51a955f70800dff.xls

  • Size

    161KB

  • MD5

    5c89641916e4e3a6a51a955f70800dff

  • SHA1

    4a106d15ecb20f5e4efaa14c087e10f9f23760dd

  • SHA256

    57f03f4ffce7c8140939ae7e5da9c8151c088a8fca47a4aab6f5504a79556d1f

  • SHA512

    5d5cd4c56ba640dcf3f839c4c5430f3ce994eb0012ef0cf5be03b20ad267c886b9a8162fb430c40fc0a6c491406b62ed8eb01085bb1a884d2c33e9e496608c07

  • SSDEEP

    3072:GypT4ARWBQf2NbUprXtUIlw3DoGFlyGja95HURrnS6/s1aHFn/GF67:XRWBQf2NbUprXtUIlw3D5LyGja95HUR3

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\5c89641916e4e3a6a51a955f70800dff.xls"
    1⤵
      PID:1208

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1208-3-0x00007FFF96010000-0x00007FFF96020000-memory.dmp

      Filesize

      64KB

    • memory/1208-7-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-9-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-12-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-14-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-15-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-19-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-21-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-23-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-22-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-20-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-18-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-17-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-16-0x00007FFF93F60000-0x00007FFF93F70000-memory.dmp

      Filesize

      64KB

    • memory/1208-13-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-10-0x00007FFF93F60000-0x00007FFF93F70000-memory.dmp

      Filesize

      64KB

    • memory/1208-11-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-8-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-5-0x00007FFF96010000-0x00007FFF96020000-memory.dmp

      Filesize

      64KB

    • memory/1208-6-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-4-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-2-0x00007FFF96010000-0x00007FFF96020000-memory.dmp

      Filesize

      64KB

    • memory/1208-1-0x00007FFF96010000-0x00007FFF96020000-memory.dmp

      Filesize

      64KB

    • memory/1208-0-0x00007FFF96010000-0x00007FFF96020000-memory.dmp

      Filesize

      64KB

    • memory/1208-34-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-37-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-36-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-35-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB

    • memory/1208-33-0x00007FFFD5F90000-0x00007FFFD6185000-memory.dmp

      Filesize

      2.0MB