Analysis
- user interaction
yes - max time kernel
30s - max time network
31s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
08/07/2026, 14:00
General
- Target West Acres Corporate Census 2026.xlsx
- Size 2.0MB
- Sample260708-rbfl5ags2w
- SHA256 a55bf980ae7374ebd93d6d55bbe12e9b35f8f9af110aa318236f77be3f2a5d1a
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 3 IoCs
- Modifies Internet Explorer settings 1 TTPs 2 IoCs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 15 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\West Acres Corporate Census 2026.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies Internet Explorer settings
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
b8ab77100df80ab2.customDestinations-ms
memory/3376-0-0x00007FFD77550000-0x00007FFD77560000-memory.dmp
memory/3376-1-0x00007FFD77550000-0x00007FFD77560000-memory.dmp
memory/3376-3-0x00007FFDB756D000-0x00007FFDB756E000-memory.dmp
memory/3376-4-0x00007FFD77550000-0x00007FFD77560000-memory.dmp
memory/3376-5-0x00007FFD77550000-0x00007FFD77560000-memory.dmp
memory/3376-2-0x00007FFD77550000-0x00007FFD77560000-memory.dmp
memory/3376-8-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-7-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-6-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-9-0x00007FFD75220000-0x00007FFD75230000-memory.dmp
memory/3376-12-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-11-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-10-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-13-0x00007FFD75220000-0x00007FFD75230000-memory.dmp
memory/3376-20-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-21-0x0000023512510000-0x00000235126B2000-memory.dmp
memory/3376-22-0x00000235824C0000-0x0000023584F20000-memory.dmp
memory/3376-23-0x000002357FD00000-0x000002357FF94000-memory.dmp
memory/3376-24-0x000002357FA60000-0x000002357FABC000-memory.dmp
memory/3376-25-0x000002357FFA0000-0x0000023580162000-memory.dmp
memory/3376-26-0x000002357F550000-0x000002357F572000-memory.dmp
memory/3376-27-0x0000023580F00000-0x0000023581C90000-memory.dmp
memory/3376-28-0x000002357F530000-0x000002357F540000-memory.dmp
memory/3376-29-0x000002357F540000-0x000002357F54A000-memory.dmp
memory/3376-30-0x000002357FAF0000-0x000002357FB12000-memory.dmp
memory/3376-31-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-32-0x0000023589240000-0x000002358D556000-memory.dmp
memory/3376-36-0x000002357FB20000-0x000002357FB48000-memory.dmp
memory/3376-37-0x000002357FBA0000-0x000002357FBF0000-memory.dmp
memory/3376-38-0x000002357FAC0000-0x000002357FAD0000-memory.dmp
memory/3376-39-0x000002357FB50000-0x000002357FB68000-memory.dmp
memory/3376-40-0x000002350B3E0000-0x000002350B43A000-memory.dmp
memory/3376-43-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-42-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-41-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-44-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-45-0x000002352A980000-0x000002352AEA8000-memory.dmp
memory/3376-46-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-47-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-49-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-48-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-50-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-51-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-56-0x0000023581C90000-0x0000023582436000-memory.dmp
memory/3376-57-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-58-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-59-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-60-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-61-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-62-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp
memory/3376-63-0x00007FFDB74D0000-0x00007FFDB76C5000-memory.dmp