Analysis

  • max time kernel
    0s
  • max time network
    128s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    25/09/2026, 14:24

General

  • Target
    attachment20260925-764-9bqh21.xlsx
  • Size 17KB
  • Sample260925-rqphkstyfs
  • SHA256 0d86fc0a998967a5364e9fc7582f108b01973d90dd0d3d8fd7d55221ed17c47c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\attachment20260925-764-9bqh21.xlsx"
    1⤵
      PID:6072
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k GPSvcGroup
      1⤵
        PID:5372

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            b8ab77100df80ab2.customDestinations-ms

            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\b8ab77100df80ab2.customDestinations-ms
            • Size 1KB
            • SHA256 40ba5996a4702e07335c5d288748d08131ebcafba9c0d3d408a1d30c16e5eaec
            • MD5 SHA1 SHA512 TLSH

            memory/6072-16-0x00007FFB03940000-0x00007FFB03950000-memory.dmp

            memory/6072-9-0x00007FFB463E0000-0x00007FFB46643000-memory.dmp

            memory/6072-15-0x00007FFB03940000-0x00007FFB03950000-memory.dmp

            memory/6072-14-0x00007FFB463E0000-0x00007FFB46643000-memory.dmp

            memory/6072-13-0x00007FFB463E0000-0x00007FFB46643000-memory.dmp

            memory/6072-4-0x00007FFB06520000-0x00007FFB06530000-memory.dmp

            memory/6072-12-0x00007FFB463E0000-0x00007FFB46643000-memory.dmp

            memory/6072-2-0x00007FFB06520000-0x00007FFB06530000-memory.dmp

            memory/6072-5-0x00007FFB06520000-0x00007FFB06530000-memory.dmp

            memory/6072-8-0x00007FFB463E0000-0x00007FFB46643000-memory.dmp

            memory/6072-11-0x00007FFB463E0000-0x00007FFB46643000-memory.dmp

            memory/6072-6-0x00007FFB463E0000-0x00007FFB46643000-memory.dmp

            memory/6072-10-0x00007FFB463E0000-0x00007FFB46643000-memory.dmp

            memory/6072-1-0x00007FFB06520000-0x00007FFB06530000-memory.dmp

            memory/6072-3-0x00007FFB4653F000-0x00007FFB46540000-memory.dmp

            memory/6072-0-0x00007FFB06520000-0x00007FFB06530000-memory.dmp

            memory/6072-22-0x00007FFB463E0000-0x00007FFB46643000-memory.dmp

            memory/6072-7-0x00007FFB463E0000-0x00007FFB46643000-memory.dmp

            memory/6072-40-0x00007FFB06520000-0x00007FFB06530000-memory.dmp

            memory/6072-41-0x00007FFB463E0000-0x00007FFB46643000-memory.dmp

            memory/6072-39-0x00007FFB06520000-0x00007FFB06530000-memory.dmp

            memory/6072-38-0x00007FFB06520000-0x00007FFB06530000-memory.dmp

            memory/6072-37-0x00007FFB06520000-0x00007FFB06530000-memory.dmp