Analysis
-
max time kernel
149s -
max time network
188s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
23-11-2022 14:39
General
-
Target
31B5DF865E37E0984F064397BAFAC9579AD2A50467318E2949D258148FB1E59E.xls
-
Size
255KB
-
MD5
1a863b0f451e3fa1def58a3764d8c0ca
-
SHA1
76e981676d22c9fd4332af8a1b75608261f19b25
-
SHA256
31b5df865e37e0984f064397bafac9579ad2a50467318e2949d258148fb1e59e
-
SHA512
1ab98498cdf40b6330e403ca86396a2a45a1cd63582a3d7757887d2bd0c6917fa7c46ffc7bfac1621d049f6a005cb1c99236c97ef68b67a269356ff58b77a35e
-
SSDEEP
6144:6Kpb8rGYrMPe3q7Q0XV5xtuEsi8/dgONiwrfx9rNFMMrttRzV5Dz3UxqC8LUcS3:yNbDjP9XH5XIqZLnS3
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\31B5DF865E37E0984F064397BAFAC9579AD2A50467318E2949D258148FB1E59E.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB