Analysis
-
max time kernel
0s -
max time network
139s -
platform
windows11-21h2_x64 -
resource
win11-20250410-en -
resource tags
-
submitted
20/04/2025, 13:32
General
-
Target
$TEMP/Dominant.xlm
-
Size
56KB
-
MD5
87135b6922c649e2328731b6046d9c4a
-
SHA1
5f37be4e42989e2ac15f975d9895f480db74e980
-
SHA256
d1a3db8200606104b56806a1c943c9ab3646cb64c9fc948e79c211ed1678bcf6
-
SHA512
31fc00f01de3459dc043b0ae19c2d02fe06e5e5881a1cfef360cf8038d2e5b4c9fef49340a2f53a03fe798f6fcd44b3cf73e4a9ebf228fe8e5f647346cbe478f
-
SSDEEP
1536:6SBzKQxfebGNGhv2agB5lIrOcW/Z4h6bMvkoD4:3WQxGSNGaB5aKcKZC6by3E
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\$TEMP\Dominant.xlm"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD56f9ebe700131c59577915345eb5fd071
SHA1dce6216f45e056b2bf29a76c4aba85e59e82437a
SHA256f582c570e48ba4f2da533b05e617f9c0118e73c367244b0236c1e5fd58049a6b
SHA512d0c6a8ec1baf43eda6c1cf3c13e43f8368ed2feeb40f830aff8d697e5186176a62c228369ec47231f66726cc50d5d35d29be59d600632c9fac61869dbd34e8ff
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB