Analysis
-
max time kernel
0s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
20/04/2025, 13:32
General
-
Target
CurrentlyCabinets/Discover.xlm
-
Size
71KB
-
MD5
041af4ff7cd17aae5721e576febb3f4c
-
SHA1
70d307578608b345ffa91dcf6ca5932792ae50d7
-
SHA256
42f566d0b992f40633847e389eb4d4a24a607afd44ae8db30c67d3d3aea11824
-
SHA512
5771927bf0bd37ffcb74602acff0b9e76279f2d8af7809a7f3d12a93ba05fbb10d0b30fd7fb0c8d7a228cb485cb2be1b22adf69a7d3bdcb9df2e904b66d4aba7
-
SSDEEP
1536:oUOhrHnige+SK+XCZix2guPS6V5uBlWJKFE4W5:dAne+BYwx5uBkKHW5
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\CurrentlyCabinets\Discover.xlm"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD525e7b4cbde777b6d86c1608c025740c8
SHA1601584bd22c6337302372e2b3382e07e0cbd97fa
SHA2569203704d3fbf52921d813c20383b2b0cbd4ce1a133500863f9d371088af7486f
SHA5121a42b578d9b8dfe47bd52004ef034b4ef6391db4782364a993e7cd7a962fcab0d819434133b3f4a6054df05628c3f846444ff6d31a8d75883414f8bc612b23d1
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB