Analysis
-
max time kernel
156s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
25-06-2022 05:22
General
-
Target
6df11e5cbc78b1ac4c9db027e1b364f950312e0a6248e67a0ba25343c073468c.xls
-
Size
681KB
-
MD5
6bea544dc5be6b7181c751cc3a6a9f75
-
SHA1
5f7872bc1d1cdb55fdce5027d12e501a634ac169
-
SHA256
6df11e5cbc78b1ac4c9db027e1b364f950312e0a6248e67a0ba25343c073468c
-
SHA512
c5eb7aded6e8cbb92f8bc969ced6c67a3340af3f97beb7006c0ab59a808cbd2efa5a9ac4bf7c5ef159aabf9da6031bdb8cf379fb33c239e1441ce063a02da3ce
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
NTFS ADS 1 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 22 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\6df11e5cbc78b1ac4c9db027e1b364f950312e0a6248e67a0ba25343c073468c.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
16KB