Analysis
-
max time kernel
101s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
07-10-2022 03:42
General
-
Target
93f83cc813f7a48cec7f39a0d5e827f582d36ceeb969c026260d1da93748125e.xls
-
Size
3.9MB
-
MD5
f85f324ccabd2c0cc39ce540b94001d7
-
SHA1
6db75c7616c95a2ad59ab6cf9b847f2e3dffd3f6
-
SHA256
93f83cc813f7a48cec7f39a0d5e827f582d36ceeb969c026260d1da93748125e
-
SHA512
3cc72fcbbf59da69911fc3ba71d3e7b14aef27bf9aa2849afb4a301ba348af87cc6e6962985a6398e65262e5f6e3f7d5f4c83e914239906516e4047d0878a74b
-
SSDEEP
98304:vopViZjFio9yGI4jBv7Sos0HZoxJfpsDEezq3XajEvx:UGyGbjBv7lsTxJhGEez9Qv
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\93f83cc813f7a48cec7f39a0d5e827f582d36ceeb969c026260d1da93748125e.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB