Analysis
-
max time kernel
153s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
23-11-2022 14:41
General
-
Target
A230F0A094F4F90C0353688E60A8705B4396970DE6FE34C9C62C077003529DC7.xls
-
Size
393KB
-
MD5
9433034c2cfa6b182409561cc01173fe
-
SHA1
9026d31a8fbffb73ee642cf42479a71e982eb4bc
-
SHA256
a230f0a094f4f90c0353688e60a8705b4396970de6fe34c9c62c077003529dc7
-
SHA512
7e841ba908930f92d317243a6e710b4baf823bacc0dbfe4ecfb06a6a7a9a5dba2ce569e4eba71dafef985e75bba1bdea299607a835ccb24dc736107407915cd0
-
SSDEEP
12288:OdNqrDx7XXXXXXXXXXXXUXXXXXXXrXXXXXXXXEmYjTm7TmD9JIxWZaTtg/g6Rm:tr5XXXXXXXXXXXXUXXXXXXXrXXXXXXX2
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\A230F0A094F4F90C0353688E60A8705B4396970DE6FE34C9C62C077003529DC7.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB