Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
23-11-2022 13:39
General
-
Target
Payment advice.xls
-
Size
746KB
-
MD5
bb3ef10c165da5d222d439b85a5b6933
-
SHA1
ab1594706c065b893ab7fc9884c005411a03aa06
-
SHA256
981a8d22f631f0002d741ccef8f825506e64f6f02f12082c6ea302a0f6855dd1
-
SHA512
2c40323c0d29880e8368698f9a9e00f0e2adcdc386deaceb4a170999599b052b72aa31f2810cd72092569a61359985d4eb325e8ee8a89b0e5413302e64e80f16
-
SSDEEP
12288:cdNqrDx7XXXXXXXXXXXXUXXXXXXXSXXXXXXXXxTmwqGdNqrDx7XXXXXXXXXXXXUH:Pr5XXXXXXXXXXXXUXXXXXXXSXXXXXXX0
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Payment advice.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB