MALICIOUS — ec292b53c9f56152d0e4f7e0b62eaf0b5fe495efda49c2cfa38c7643da9c7e2d.xlsx

Verdict: malicious (88/100) · Family: unknown

File type: office-ole · SHA-256: ec292b53c9f56152d0e4f7e0b62eaf0b5fe495efda49c2cfa38c7643da9c7e2d

MITRE ATT&CK

• T1112

YARA

Dynamic analysis (windows)

1079 behavior events · 1 ATT&CK techniques · 29 dropped files.

Runtime network

• www.msftconnecttest.com
• inference.location.live.net
• _dosvc._tcp.local
• desktop-hsgcbep._dosvc._tcp.local
• ntp.ubuntu.com
• http://www.msftconnecttest.com/connecttest.txt
• 23.40.52.85
• 20.190.142.166
• 4.207.44.70
• 23.33.238.178
• 23.198.40.44
• 52.110.12.16
• 4.230.171.124
• 23.33.238.207
• 23.33.238.114
• 151.101.30.172
• 52.123.129.14
• 23.40.52.69
• 150.171.109.25
• 135.232.92.34

Analyzed on MalwareAnalyzer by Cyble · Open interactive report