Analysis

  • max time kernel
    0s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/09/2026, 06:02

General

  • Target
    attachment20260925-764-l36eae.xlsx
  • Size 17KB
  • Sample260925-grflysbb36
  • SHA256 0d86fc0a998967a5364e9fc7582f108b01973d90dd0d3d8fd7d55221ed17c47c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\attachment20260925-764-l36eae.xlsx"
    1⤵
      PID:3832

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          b8ab77100df80ab2.customDestinations-ms

          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\b8ab77100df80ab2.customDestinations-ms
          • Size 1KB
          • SHA256 03497964f843a13f59a7192e6e2e495acea6f9afabcc0858a6a0582d82f99a72
          • MD5 SHA1 SHA512 TLSH

          memory/3832-5-0x00007FF8A7A90000-0x00007FF8A7AA0000-memory.dmp

          memory/3832-3-0x00007FF8E7AAD000-0x00007FF8E7AAE000-memory.dmp

          memory/3832-14-0x00007FF8E7A10000-0x00007FF8E7C05000-memory.dmp

          memory/3832-13-0x00007FF8E7A10000-0x00007FF8E7C05000-memory.dmp

          memory/3832-11-0x00007FF8E7A10000-0x00007FF8E7C05000-memory.dmp

          memory/3832-15-0x00007FF8A5480000-0x00007FF8A5490000-memory.dmp

          memory/3832-10-0x00007FF8A5480000-0x00007FF8A5490000-memory.dmp

          memory/3832-8-0x00007FF8E7A10000-0x00007FF8E7C05000-memory.dmp

          memory/3832-7-0x00007FF8E7A10000-0x00007FF8E7C05000-memory.dmp

          memory/3832-2-0x00007FF8A7A90000-0x00007FF8A7AA0000-memory.dmp

          memory/3832-12-0x00007FF8E7A10000-0x00007FF8E7C05000-memory.dmp

          memory/3832-6-0x00007FF8E7A10000-0x00007FF8E7C05000-memory.dmp

          memory/3832-4-0x00007FF8A7A90000-0x00007FF8A7AA0000-memory.dmp

          memory/3832-1-0x00007FF8A7A90000-0x00007FF8A7AA0000-memory.dmp

          memory/3832-0-0x00007FF8A7A90000-0x00007FF8A7AA0000-memory.dmp

          memory/3832-17-0x00007FF8E7A10000-0x00007FF8E7C05000-memory.dmp

          memory/3832-9-0x00007FF8E7A10000-0x00007FF8E7C05000-memory.dmp

          memory/3832-45-0x00007FF8E7A10000-0x00007FF8E7C05000-memory.dmp

          memory/3832-42-0x00007FF8A7A90000-0x00007FF8A7AA0000-memory.dmp

          memory/3832-44-0x00007FF8A7A90000-0x00007FF8A7AA0000-memory.dmp

          memory/3832-43-0x00007FF8A7A90000-0x00007FF8A7AA0000-memory.dmp

          memory/3832-41-0x00007FF8A7A90000-0x00007FF8A7AA0000-memory.dmp