Analysis
-
max time kernel
144s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 18:46
General
-
Target
5802d6e317fae9732655de548512132f00f9cacbe48ec828dd102842dd836116.xls
-
Size
12KB
-
MD5
9a99e96f248bc28b00dd54f2a09feae1
-
SHA1
d36ac27f702345f99805d0a480f9f3a33f6fe0f8
-
SHA256
5802d6e317fae9732655de548512132f00f9cacbe48ec828dd102842dd836116
-
SHA512
b58db766e5df33d890e788eaafbe0c86951e6205b989bc4660e73dcb1c78626afa749803af42d11d0c1bbc16e19913e99333099c24172398cf993b53a261cd55
-
SSDEEP
192:5R0pDpDpDdpHqcJHZmbdcU4HjCj2WH0Wn54/X+Nn6R278hhPPPPPPPPPPVXJQM78:5WNNNd1qcJ5mbdcU4HjCj2WH0w54/X+P
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\5802d6e317fae9732655de548512132f00f9cacbe48ec828dd102842dd836116.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB