Analysis
-
max time kernel
151s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
23-11-2022 14:41
General
-
Target
0B20638506B6B6FFE28564F757D17D41311A1B1887BFBD3A7E0F0E6DF21370B8.xlsx
-
Size
816KB
-
MD5
694e2a393bec2bc0cd7db106e391fd0a
-
SHA1
405a4ee0a93725506ed5f522afaeb7901d5ff9b3
-
SHA256
0b20638506b6b6ffe28564f757d17d41311a1b1887bfbd3a7e0f0e6df21370b8
-
SHA512
546e02b147ab3a2fb01490aa68b29596844331e47aadca4b15aaa5e66f2caf5c0295ab416c7c727d74e0fc466126ad4822f5b13906beb654e333c5b249416fbd
-
SSDEEP
12288:PML7nvXmvU+z2NT9TlHyGKjicrys0AmYSCQnATNtdXyWWK6vNK37c:+mvU3dvrS1ys0cbbtdX2rKg
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\0B20638506B6B6FFE28564F757D17D41311A1B1887BFBD3A7E0F0E6DF21370B8.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB