Analysis
-
max time kernel
99s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
04-11-2022 05:06
General
-
Target
cdb8ef131c21f1c11b631fe71f69e13ddd3ba0a68811becc8ac0fcde16d5a725.xlsx
-
Size
29KB
-
MD5
afc0a9f32419d54f2b7efcd270ea8a01
-
SHA1
ca12c0f845b511d8aaabba2eeee8cefd14e4f30e
-
SHA256
cdb8ef131c21f1c11b631fe71f69e13ddd3ba0a68811becc8ac0fcde16d5a725
-
SHA512
4ddc912772c7a0f224266fe92fd2d534790e07dfa292f6aa60ab1b1165af23825a1d7e0e6d25f6f6f354e52ba59d8d933af9932a14a4f60562ff1a0c2f2c321e
-
SSDEEP
768:Q65Dwj/2zpJ7W0/jAtn0JnEKNnE3iIre9:zw/2fW0/jAlW9Ey3
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\cdb8ef131c21f1c11b631fe71f69e13ddd3ba0a68811becc8ac0fcde16d5a725.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB