Analysis

  • max time kernel
    0s
  • max time network
    134s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/07/2026, 23:26

General

  • Target
    attachment20260729-750-mqb5eh.xlsx
  • Size 114KB
  • Sample260729-3ethyaxycs
  • SHA256 4fc50abe4214a380c881eb7b71ec71d2ee63a4ce87138e008dbe800a298df280
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\attachment20260729-750-mqb5eh.xlsx"
    1⤵
      PID:1188

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          b8ab77100df80ab2.customDestinations-ms

          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\b8ab77100df80ab2.customDestinations-ms
          • Size 1KB
          • SHA256 e6151f70859c59d9d480c8148c45883911ab84a1cd34281cb353326d2588366e
          • MD5 SHA1 SHA512 TLSH

          memory/1188-11-0x00007FFC03360000-0x00007FFC035C3000-memory.dmp

          memory/1188-16-0x00007FFBC0E00000-0x00007FFBC0E10000-memory.dmp

          memory/1188-9-0x00007FFC03360000-0x00007FFC035C3000-memory.dmp

          memory/1188-8-0x00007FFC03360000-0x00007FFC035C3000-memory.dmp

          memory/1188-13-0x00007FFC03360000-0x00007FFC035C3000-memory.dmp

          memory/1188-15-0x00007FFC03360000-0x00007FFC035C3000-memory.dmp

          memory/1188-4-0x00007FFBC34A0000-0x00007FFBC34B0000-memory.dmp

          memory/1188-14-0x00007FFC03360000-0x00007FFC035C3000-memory.dmp

          memory/1188-12-0x00007FFC03360000-0x00007FFC035C3000-memory.dmp

          memory/1188-10-0x00007FFC03360000-0x00007FFC035C3000-memory.dmp

          memory/1188-7-0x00007FFC03360000-0x00007FFC035C3000-memory.dmp

          memory/1188-17-0x00007FFBC0E00000-0x00007FFBC0E10000-memory.dmp

          memory/1188-0-0x00007FFBC34A0000-0x00007FFBC34B0000-memory.dmp

          memory/1188-3-0x00007FFC034BF000-0x00007FFC034C0000-memory.dmp

          memory/1188-1-0x00007FFBC34A0000-0x00007FFBC34B0000-memory.dmp

          memory/1188-2-0x00007FFBC34A0000-0x00007FFBC34B0000-memory.dmp

          memory/1188-5-0x00007FFBC34A0000-0x00007FFBC34B0000-memory.dmp

          memory/1188-25-0x00007FFC03360000-0x00007FFC035C3000-memory.dmp

          memory/1188-6-0x00007FFC03360000-0x00007FFC035C3000-memory.dmp

          memory/1188-56-0x00007FFBC34A0000-0x00007FFBC34B0000-memory.dmp

          memory/1188-57-0x00007FFC03360000-0x00007FFC035C3000-memory.dmp

          memory/1188-55-0x00007FFBC34A0000-0x00007FFBC34B0000-memory.dmp

          memory/1188-54-0x00007FFBC34A0000-0x00007FFBC34B0000-memory.dmp

          memory/1188-53-0x00007FFBC34A0000-0x00007FFBC34B0000-memory.dmp