Analysis

  • max time kernel
    0s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/04/2025, 13:32

General

  • Target

    CurrentlyCabinets/Bd.xlm

  • Size

    76KB

  • MD5

    af517acf6d217684628c6bcb4ed1ddab

  • SHA1

    3489c329b329b90c912f5a652893edb1cae7fbdb

  • SHA256

    6d31707e60953f322824d872f2aef98fc9dd76215ab14b2b778e4148e2a9a144

  • SHA512

    a8bc0f70c10215c2de8f3a156e6eba2f5f60940aaef83fe3f96ae13ec406df5bcf02185c6cf625a258b22480846353b95d65ad7ed736f81afeabda34adf74b0f

  • SSDEEP

    1536:SeitUAbcPe0et/DZ9P7g9YArbMDB9BtcaBS0p:4KAbcOt/l9Tg1rb2OIS0

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\CurrentlyCabinets\Bd.xlm"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:4952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\b8ab77100df80ab2.customDestinations-ms

    Filesize

    1KB

    MD5

    d430552e28342ce0250e95ffa90026e1

    SHA1

    9730c23ef35975c4061038bc1e75885be7cadcdb

    SHA256

    c7a7bb86be2f061f462a98dbee77132d2779c6cc7d67bbe522d9071a96040bc7

    SHA512

    ebca40bb50be3415ee886750460861c0ca346f00c54420ce8aa019ad9e786cfae488f7ee80c36db598285a09b1c6e061cae68e7113f3a07544360cd67aec6b9a

  • memory/4952-8-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-6-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-15-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-13-0x00007FF7F1230000-0x00007FF7F1240000-memory.dmp

    Filesize

    64KB

  • memory/4952-12-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-17-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-19-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-22-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-23-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-21-0x00007FF7F1230000-0x00007FF7F1240000-memory.dmp

    Filesize

    64KB

  • memory/4952-20-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-18-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-16-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-11-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-9-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-5-0x00007FF7F3A90000-0x00007FF7F3AA0000-memory.dmp

    Filesize

    64KB

  • memory/4952-14-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-4-0x00007FF7F3A90000-0x00007FF7F3AA0000-memory.dmp

    Filesize

    64KB

  • memory/4952-7-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-3-0x00007FF7F3A90000-0x00007FF7F3AA0000-memory.dmp

    Filesize

    64KB

  • memory/4952-2-0x00007FF7F3A90000-0x00007FF7F3AA0000-memory.dmp

    Filesize

    64KB

  • memory/4952-1-0x00007FF7F3A90000-0x00007FF7F3AA0000-memory.dmp

    Filesize

    64KB

  • memory/4952-0-0x00007FF833AAD000-0x00007FF833AAE000-memory.dmp

    Filesize

    4KB

  • memory/4952-34-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-33-0x00007FF833AAD000-0x00007FF833AAE000-memory.dmp

    Filesize

    4KB

  • memory/4952-35-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-36-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-10-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-64-0x00007FF833A10000-0x00007FF833C05000-memory.dmp

    Filesize

    2.0MB

  • memory/4952-63-0x00007FF7F3A90000-0x00007FF7F3AA0000-memory.dmp

    Filesize

    64KB

  • memory/4952-62-0x00007FF7F3A90000-0x00007FF7F3AA0000-memory.dmp

    Filesize

    64KB

  • memory/4952-61-0x00007FF7F3A90000-0x00007FF7F3AA0000-memory.dmp

    Filesize

    64KB

  • memory/4952-60-0x00007FF7F3A90000-0x00007FF7F3AA0000-memory.dmp

    Filesize

    64KB