Analysis
-
max time kernel
102s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
23-11-2022 10:53
General
-
Target
INVOICE.xlsx
-
Size
635KB
-
MD5
50d4c5006d1abef317feb283d0baf2ac
-
SHA1
0afc1dc445d3896f75e29b62a4fdba8e06a5fe3c
-
SHA256
f7f7eef1335e813a234c7bfa0122c9865ef55f8655082fa9cf4e295fb4b58981
-
SHA512
5c1247d7d981a583c72e1817693871b8520237976baebe661d39fd689fbb9aa7ad0250059eda9d8f99ed2214704c6a731dfe45a4c0b13f51d55f85307d0cd52b
-
SSDEEP
12288:EjcUe04sRll50nRkC+MOh6iM8rNcillJ20BEyKsJ2vqlNVpsKqwlDDOBYM09cH:EAUvZCRkBMj827Y22VxqwllQH
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\INVOICE.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB