Analysis
- max time kernel
150s - max time network
131s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
- submitted
22/06/2026, 01:27
General
- Target Plantilla_Share_tarjetas_4.0.xlsm
- Size 19.1MB
- Sample260622-bvbvaahs3z
- SHA256 b1e6ffc5ee923ee480922bc1c38e77e70f09b7fae6de822c2f935d89dbc34a1a
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 3 IoCs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of FindShellTrayWindow 2 IoCs
- Suspicious use of SetWindowsHookEx 17 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Plantilla_Share_tarjetas_4.0.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5836-0-0x00007FFD22AE0000-0x00007FFD22AF0000-memory.dmp
memory/5836-3-0x00007FFD22AE0000-0x00007FFD22AF0000-memory.dmp
memory/5836-2-0x00007FFD22AE0000-0x00007FFD22AF0000-memory.dmp
memory/5836-1-0x00007FFD62AFF000-0x00007FFD62B00000-memory.dmp
memory/5836-6-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-5-0x00007FFD22AE0000-0x00007FFD22AF0000-memory.dmp
memory/5836-7-0x00007FFD22AE0000-0x00007FFD22AF0000-memory.dmp
memory/5836-4-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-10-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-9-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-8-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-11-0x00007FFD202B0000-0x00007FFD202C0000-memory.dmp
memory/5836-12-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-13-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-14-0x00007FFD202B0000-0x00007FFD202C0000-memory.dmp
memory/5836-19-0x00007FFD62AFF000-0x00007FFD62B00000-memory.dmp
memory/5836-21-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-20-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-22-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-23-0x000001AFFAA70000-0x000001AFFAC12000-memory.dmp
memory/5836-24-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-26-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-25-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-28-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-27-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-29-0x000001B000000000-0x000001B002A60000-memory.dmp
memory/5836-30-0x000001AFFAEC0000-0x000001AFFB154000-memory.dmp
memory/5836-33-0x000001AFFA6C0000-0x000001AFFA6E2000-memory.dmp
memory/5836-32-0x000001AFFB160000-0x000001AFFB322000-memory.dmp
memory/5836-31-0x000001AFFA750000-0x000001AFFA7AC000-memory.dmp
memory/5836-34-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-35-0x000001AFFC0C0000-0x000001AFFCE50000-memory.dmp
memory/5836-36-0x000001AFFA6F0000-0x000001AFFA700000-memory.dmp
memory/5836-37-0x000001AFFA7F0000-0x000001AFFA7FA000-memory.dmp
memory/5836-38-0x000001AFFA800000-0x000001AFFA822000-memory.dmp
memory/5836-39-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-40-0x000001B006D80000-0x000001B00B096000-memory.dmp
memory/5836-41-0x000001AFFA830000-0x000001AFFA858000-memory.dmp
memory/5836-42-0x000001AFFA8C0000-0x000001AFFA910000-memory.dmp
memory/5836-43-0x000001AFFA710000-0x000001AFFA720000-memory.dmp
memory/5836-44-0x000001AFFA7D0000-0x000001AFFA7E8000-memory.dmp
memory/5836-45-0x000001AFFA970000-0x000001AFFA9CA000-memory.dmp
memory/5836-47-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-46-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-48-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-49-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-50-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-51-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-52-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-53-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-54-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-63-0x000001AF98540000-0x000001AF98A68000-memory.dmp
memory/5836-65-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-64-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp
memory/5836-66-0x000001AFFB330000-0x000001AFFB42C000-memory.dmp
memory/5836-84-0x00007FFD22AE0000-0x00007FFD22AF0000-memory.dmp
memory/5836-86-0x00007FFD22AE0000-0x00007FFD22AF0000-memory.dmp
memory/5836-85-0x00007FFD22AE0000-0x00007FFD22AF0000-memory.dmp
memory/5836-87-0x00007FFD22AE0000-0x00007FFD22AF0000-memory.dmp
memory/5836-88-0x00007FFD629A0000-0x00007FFD62C03000-memory.dmp