Analysis

  • max time kernel
    0s
  • max time network
    137s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    25/09/2026, 14:20

General

  • Target
    attachment20260925-764-mnhcss.xlsx
  • Size 17KB
  • Sample260925-rnd9tstyay
  • SHA256 0d86fc0a998967a5364e9fc7582f108b01973d90dd0d3d8fd7d55221ed17c47c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\attachment20260925-764-mnhcss.xlsx"
    1⤵
      PID:4384
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k GPSvcGroup
      1⤵
        PID:6040

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            b8ab77100df80ab2.customDestinations-ms

            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\b8ab77100df80ab2.customDestinations-ms
            • Size 1KB
            • SHA256 4a8679b4671a27b4bf2ca299b957729ce6ca3bd066ce43bd1923e4fadf9613e0
            • MD5 SHA1 SHA512 TLSH

            memory/4384-8-0x00007FFC6B740000-0x00007FFC6B9A3000-memory.dmp

            memory/4384-15-0x00007FFC6B740000-0x00007FFC6B9A3000-memory.dmp

            memory/4384-9-0x00007FFC6B740000-0x00007FFC6B9A3000-memory.dmp

            memory/4384-12-0x00007FFC6B740000-0x00007FFC6B9A3000-memory.dmp

            memory/4384-14-0x00007FFC29170000-0x00007FFC29180000-memory.dmp

            memory/4384-16-0x00007FFC6B740000-0x00007FFC6B9A3000-memory.dmp

            memory/4384-2-0x00007FFC2B880000-0x00007FFC2B890000-memory.dmp

            memory/4384-13-0x00007FFC6B740000-0x00007FFC6B9A3000-memory.dmp

            memory/4384-17-0x00007FFC29170000-0x00007FFC29180000-memory.dmp

            memory/4384-11-0x00007FFC6B740000-0x00007FFC6B9A3000-memory.dmp

            memory/4384-7-0x00007FFC6B740000-0x00007FFC6B9A3000-memory.dmp

            memory/4384-10-0x00007FFC6B740000-0x00007FFC6B9A3000-memory.dmp

            memory/4384-0-0x00007FFC2B880000-0x00007FFC2B890000-memory.dmp

            memory/4384-4-0x00007FFC6B89F000-0x00007FFC6B8A0000-memory.dmp

            memory/4384-3-0x00007FFC2B880000-0x00007FFC2B890000-memory.dmp

            memory/4384-1-0x00007FFC2B880000-0x00007FFC2B890000-memory.dmp

            memory/4384-5-0x00007FFC6B740000-0x00007FFC6B9A3000-memory.dmp

            memory/4384-19-0x00007FFC6B740000-0x00007FFC6B9A3000-memory.dmp

            memory/4384-6-0x00007FFC2B880000-0x00007FFC2B890000-memory.dmp

            memory/4384-54-0x00007FFC6B740000-0x00007FFC6B9A3000-memory.dmp

            memory/4384-53-0x00007FFC2B880000-0x00007FFC2B890000-memory.dmp

            memory/4384-52-0x00007FFC2B880000-0x00007FFC2B890000-memory.dmp

            memory/4384-51-0x00007FFC2B880000-0x00007FFC2B890000-memory.dmp

            memory/4384-50-0x00007FFC2B880000-0x00007FFC2B890000-memory.dmp