Analysis
-
max time kernel
156s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
23-11-2022 14:40
General
-
Target
D6CDB1398483516A8425B97EABD2F699F2B31BEF867FF15204DBB222E605B5AE.xlsx
-
Size
701KB
-
MD5
b72c7863239a16b50df71e264ee99669
-
SHA1
2e3deaae04ca00072c55ee44b5fb90f6a13ca50d
-
SHA256
d6cdb1398483516a8425b97eabd2f699f2b31bef867ff15204dbb222e605b5ae
-
SHA512
c13b8e3f53b51f09b8d3761f97b325c62453eb3bd2c801361f76b64a4ba478f3f40e8b5487c591486952ed80c725d7b00e1ae777a379dcc3743348874c5d5d94
-
SSDEEP
12288:xIjKgzbzULaIcHBIA68+12IxLwrI4v89iUegQlLsdIrB4F3tqZdWKeJLXRvZE:xgBIA68+12KLw04v89p5QlgdIVe3yaXI
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\D6CDB1398483516A8425B97EABD2F699F2B31BEF867FF15204DBB222E605B5AE.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB