Analysis
-
max time kernel
137s -
max time network
146s -
platform
windows10_x64 -
resource
win10v200430 -
submitted
16/07/2020, 11:56
General
-
Target
conferma_361.xls
-
Size
202KB
-
MD5
9b2425e675ba07c85f76bb01186d9ba2
-
SHA1
db96d1db7235549ca1a5d4a9c1c4676b7249d9dc
-
SHA256
90a20e435f0f6732b85abee8b8f5511d307501320d55d51fa35a3eaf792b58aa
-
SHA512
e60097206843c7df4511866c0046c2b990b9c095fd3fcd23f342c12c768d483421aebabe0440525a2cdab4b268de506022a87862441045c21685af2ea523cd9f
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\conferma_361.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: AddClipboardFormatListener