Analysis
-
max time kernel
121s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
12-10-2022 05:44
General
-
Target
f1721b6302939588681731ae7539a81a9f60f97658774f78636a169ffc572c18.xls
-
Size
67KB
-
MD5
1aaee9cdb8c046026f47b6f2a6dad249
-
SHA1
26859a92ed7285840fbbb52043bab785d7c16fe2
-
SHA256
f1721b6302939588681731ae7539a81a9f60f97658774f78636a169ffc572c18
-
SHA512
c24633a8af08291e947c91d850da4b67ac444990b00e6cc8402542942a4a1d2caa71f79e3ac872a3b0a00c3daf5f1c7476ab9d2406c6d2772f6c244bb32602a6
-
SSDEEP
1536:Ly9LI2U7n1KFN+dowVhVFhvqARRQFDsaulStJ:Ly9LI2U7n1KFN+dowVhVFhvqARRQFDsS
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\f1721b6302939588681731ae7539a81a9f60f97658774f78636a169ffc572c18.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
16KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB