Overview

overview

10

Static

static

468b309cd5...7.xlsx

windows7_x64

10

468b309cd5...7.xlsx

windows10_x64

1

Analysis

  • max time kernel
    137s
  • max time network
    131s
  • platform
    windows10_x64
  • resource
    win10
  • submitted
    25-08-2020 22:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    468b309cd57cd59ddc28e2407ce54a27.xlsx

  • Size

    223KB

  • MD5

    468b309cd57cd59ddc28e2407ce54a27

  • SHA1

    570380cdf752e1177928129bbafad86abd446c65

  • SHA256

    ec51dc5571981991d081899b18decaacc5aee8d8891ddb205507ab397366a1e1

  • SHA512

    6e80d3d4623f74daf285a91b3c3700453624f31f786e448e86d83c1fbea440773b952093d133342302fa7c6b403b107cb5ccfaa3d14b7ad37af9130b3f20f345

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\468b309cd57cd59ddc28e2407ce54a27.xlsx"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:3104

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3104-0-0x00007FF88C9B0000-0x00007FF88D076000-memory.dmp
    Filesize

    6.8MB

    Download