Analysis

  • max time kernel
    2s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 12:04

General

  • Target

    17f27c6d0b6d6700bfccddb0574ff76b.xlsm

  • Size

    3.4MB

  • MD5

    17f27c6d0b6d6700bfccddb0574ff76b

  • SHA1

    a3ba4957667ccb4039d540e534d1bd5a16a8dc0d

  • SHA256

    ef18432e855ad0c65694622ca3f31d30cec554020ca1acdf1b648b6b7d31ed72

  • SHA512

    96083bbad8d0b807adf9efe118efeb455fccbbd1f0ae86a8f0662924ff5a2949f89fc07f9e24755fdc4497f9c935008f2716f8ebd11aa298e1603f01a5ab5ee6

  • SSDEEP

    98304:wCErQ90vhEn79puwUnz4SinmYEdc6yU1KaBjCaL5hdj4cwk:wCCU2K7ZG9Yhu7B74c1

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\17f27c6d0b6d6700bfccddb0574ff76b.xlsm"
    1⤵
      PID:4340
      • C:\Windows\splwow64.exe
        C:\Windows\splwow64.exe 12288
        2⤵
          PID:740
      • C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
        1⤵
          PID:3584

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4340-0-0x00007FF7C7FF0000-0x00007FF7C8000000-memory.dmp

          Filesize

          64KB

        • memory/4340-2-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-6-0x00007FF7C7FF0000-0x00007FF7C8000000-memory.dmp

          Filesize

          64KB

        • memory/4340-7-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-5-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-8-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-9-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-4-0x00007FF7C7FF0000-0x00007FF7C8000000-memory.dmp

          Filesize

          64KB

        • memory/4340-10-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-11-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-13-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-12-0x00007FF7C5920000-0x00007FF7C5930000-memory.dmp

          Filesize

          64KB

        • memory/4340-14-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-3-0x00007FF7C7FF0000-0x00007FF7C8000000-memory.dmp

          Filesize

          64KB

        • memory/4340-15-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-16-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-1-0x00007FF7C7FF0000-0x00007FF7C8000000-memory.dmp

          Filesize

          64KB

        • memory/4340-17-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-18-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-19-0x00007FF7C5920000-0x00007FF7C5930000-memory.dmp

          Filesize

          64KB

        • memory/4340-20-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-21-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-22-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-23-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-58-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-65-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-74-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-105-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-117-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-124-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-129-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-132-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-134-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-141-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-143-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-144-0x00000220A6B50000-0x00000220A7B20000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-147-0x00007FF807F70000-0x00007FF808165000-memory.dmp

          Filesize

          2.0MB

        • memory/4340-148-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-149-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-150-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-151-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-152-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-153-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-154-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-155-0x00000220A26E0000-0x00000220A36B0000-memory.dmp

          Filesize

          15.8MB

        • memory/4340-156-0x00000220A6B50000-0x00000220A7B20000-memory.dmp

          Filesize

          15.8MB