IOC Report
MissingInvoices.xls

loading gif

Files

File Path
Type
Category
Malicious
MissingInvoices.xls
CDFV2 Microsoft Excel
initial sample
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
data
dropped
C:\Users\user\AppData\Local\Microsoft\Office\Features\1-7FeatureCache.txt (copy)
data
dropped
C:\Users\user\AppData\Local\Temp\BB9395ED.tmp
data
dropped
C:\Users\user\AppData\Local\Temp\~DFCC0187D67FCC573A.TMP
data
dropped
C:\Users\user\Desktop\MissingInvoices.xls
CDFV2 Microsoft Excel
dropped

Domains

Name
IP
Malicious
s-part-0017.t-0009.fb-t-msedge.net
13.107.253.45

IPs

IP
Domain
Country
Malicious
52.113.194.132
unknown
United States
52.109.68.129
unknown
United States
93.184.221.240
unknown
European Union
13.89.179.13
unknown
United States
52.109.28.46
unknown
United States
13.107.253.45
s-part-0017.t-0009.fb-t-msedge.net
United States
184.28.90.27
unknown
United States