Analysis

  • max time kernel
    0s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-01-2024 15:37

General

  • Target

    decrypted.xlsx

  • Size

    1.3MB

  • MD5

    f5b4bd4141f8b4da173da03027f873da

  • SHA1

    a92babeea87bb0ffdb6ed2d9d0112b2a553db765

  • SHA256

    97bc79522c6ebe2748c30e0dd64541104d99ed9c914167b2609aa3e6262f419c

  • SHA512

    ae03520d52d4fc33117d624872ae04ab4d80fb103a2bfb66305d6d06e48071194c5829bdd13dc6b593fb8b5f3d08a0c4bc0a7f58bcf3f1493a6a8b19daa3c89f

  • SSDEEP

    24576:G2KNkGi9U9E6f8ZD7kx7XAshc7oor7RgrBnbML:MHEUm6f8ZD7kVZkoovR6n8

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\decrypted.xlsx"
    1⤵
      PID:3320

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3320-3-0x00007FFCFE0D0000-0x00007FFCFE0E0000-memory.dmp

      Filesize

      64KB

    • memory/3320-5-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-9-0x00007FFCFBEE0000-0x00007FFCFBEF0000-memory.dmp

      Filesize

      64KB

    • memory/3320-14-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-17-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-19-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-23-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-22-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-21-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-20-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-18-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-16-0x00007FFCFBEE0000-0x00007FFCFBEF0000-memory.dmp

      Filesize

      64KB

    • memory/3320-15-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-13-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-12-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-11-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-10-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-8-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-7-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-6-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-4-0x00007FFCFE0D0000-0x00007FFCFE0E0000-memory.dmp

      Filesize

      64KB

    • memory/3320-2-0x00007FFCFE0D0000-0x00007FFCFE0E0000-memory.dmp

      Filesize

      64KB

    • memory/3320-1-0x00007FFCFE0D0000-0x00007FFCFE0E0000-memory.dmp

      Filesize

      64KB

    • memory/3320-0-0x00007FFCFE0D0000-0x00007FFCFE0E0000-memory.dmp

      Filesize

      64KB

    • memory/3320-40-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-75-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-74-0x00007FFD3E050000-0x00007FFD3E245000-memory.dmp

      Filesize

      2.0MB

    • memory/3320-73-0x00007FFCFE0D0000-0x00007FFCFE0E0000-memory.dmp

      Filesize

      64KB

    • memory/3320-72-0x00007FFCFE0D0000-0x00007FFCFE0E0000-memory.dmp

      Filesize

      64KB

    • memory/3320-71-0x00007FFCFE0D0000-0x00007FFCFE0E0000-memory.dmp

      Filesize

      64KB

    • memory/3320-70-0x00007FFCFE0D0000-0x00007FFCFE0E0000-memory.dmp

      Filesize

      64KB