Analysis
-
max time kernel
115s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
18-09-2022 22:22
General
-
Target
ca8535580cefcbc01887966cd78b775a5ad07ef4e67c36b09e08eaa01c0c05e2.xls
-
Size
22KB
-
MD5
67c7fea52c8b1c24ed8f50ab4ff9a0ec
-
SHA1
2757aa797de689fbf981d24ace15238f544eb4fb
-
SHA256
ca8535580cefcbc01887966cd78b775a5ad07ef4e67c36b09e08eaa01c0c05e2
-
SHA512
a807c4c6d964ae537ca7c9fec85219d5e19d2220e4e33cd97626752e779051ef078001c31b7b69e4a4ee0244d1870e45f97e6d78f7754304c76962bd14f8750f
-
SSDEEP
384:e6WppXh+Ii6fwg5OlYMOwMXH4ntrzRf/6sAMLh:PWppXsIi6Z8lYMOsn5J
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 14 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\ca8535580cefcbc01887966cd78b775a5ad07ef4e67c36b09e08eaa01c0c05e2.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB