Analysis
-
max time kernel
124s -
max time network
134s -
platform
windows10_x64 -
resource
win10-en-20210920 -
submitted
13-10-2021 07:49
General
-
Target
PROFORMA INVOICE4567.xlsx
-
Size
657KB
-
MD5
2aef1857cad31496174b607df0bfbfe9
-
SHA1
878676c90762705166888bcc41ab51f8f4e92868
-
SHA256
11a01b9c73c2ed2bc22dcd56b2925ecde913e7c2c37996da0584c124a0a00df2
-
SHA512
d0f5fac446050d1b022c1a904717ab0b695e2ad83a5938545fe1e9a54b4eb2129ab788b7d40cad49f17d57c0f26c0b39da728c4d0550974612ded6876e4f74e2
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\PROFORMA INVOICE4567.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\splwow64.exeC:\Windows\splwow64.exe 122882⤵
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
64KB
-
Filesize
8KB
-