Analysis
-
max time kernel
154s -
max time network
176s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 14:40
General
-
Target
067C2A2F4C8344F55CAE9CC1C6BA03324A4CC99AE5FACD672D100C71F64233E0.xls
-
Size
560KB
-
MD5
c1cb29e7ba19799e20fae14ffa698418
-
SHA1
f110beaef6f2e5087e5d5accfa393699aa14fd6a
-
SHA256
067c2a2f4c8344f55cae9cc1c6ba03324a4cc99ae5facd672d100c71f64233e0
-
SHA512
376eed6b11c41862de2f2a5d1616f59f3cc0e9dc5e2b25b19ee3455956bef18374d1cea3ed53539b52c3efa223e277265d3b45116a86776336d684ce7a2f5d54
-
SSDEEP
12288:NdNqrDx7XXXXXXXXXXXXUXXXXXXXrXXXXXXXXEmYoTmVTmQZyZ7vsuzY/+s:8r5XXXXXXXXXXXXUXXXXXXXrXXXXXXXV
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\067C2A2F4C8344F55CAE9CC1C6BA03324A4CC99AE5FACD672D100C71F64233E0.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB