Analysis
-
max time kernel
75s -
max time network
136s -
platform
windows10_x64 -
resource
win10v20210410 -
submitted
21-07-2021 13:59
General
-
Target
ba9ca2e9d9928929e9ab6052c9cd21b7fa029ea04604579a5e88013d193fa48c.xlsm
-
Size
8KB
-
MD5
0df4c4f8d58c4fd57ccc85df7fe4bdda
-
SHA1
69e290f307bf9e71d8d56e94048afde0b3bb00b5
-
SHA256
ba9ca2e9d9928929e9ab6052c9cd21b7fa029ea04604579a5e88013d193fa48c
-
SHA512
28123c3e3c275c7c0ba682aa021edc2315b4891d47fe54ceaf1a42c26827c926068a448c8f92fd02573b5c519abf4d1ca90789915ddae32019685f1b5595d496
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 9 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\ba9ca2e9d9928929e9ab6052c9cd21b7fa029ea04604579a5e88013d193fa48c.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
53.7MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
16.9MB
-
Filesize
31.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB