Analysis
-
max time kernel
101s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
01/10/2022, 01:44
General
-
Target
5b48b1df3b43f058f23762aecbb99ec00d5d0163bb307c3314238ede43e48e71.xlsx
-
Size
10KB
-
MD5
b31d39ae98b32aacdbeed119155a223a
-
SHA1
af61d31a380272288ea4e680c595c92d913ae862
-
SHA256
5b48b1df3b43f058f23762aecbb99ec00d5d0163bb307c3314238ede43e48e71
-
SHA512
dcd95467e94738575c1ec97537108ee5938983826a4556c0ac85723abeedc9d15b8de0916c97930a2f28a58c708acb33483e8a7e2c2b9e6fe889f362afd952c1
-
SSDEEP
192:wc8mVrb3UFJt7ra8AF+joAWjNj0UlY0fqcbX4mzSdtUbM888zghLLcb:wc313yJdra8AF5xjpesDKdtcM8lzIcb
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\5b48b1df3b43f058f23762aecbb99ec00d5d0163bb307c3314238ede43e48e71.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB