Analysis
-
max time kernel
153s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
23/11/2022, 19:54
General
-
Target
8bd800b29c995aeca8b272241be077a93acd5f2d40bb0dfae26cc891ab7e709a.xls
-
Size
47KB
-
MD5
2c424055fdeaf50a6ec9a930a821da54
-
SHA1
a93c905b665f876e898308750ed35470c69b4c74
-
SHA256
8bd800b29c995aeca8b272241be077a93acd5f2d40bb0dfae26cc891ab7e709a
-
SHA512
55c79c733738bde0903da5ab80fd9af89be810e4c3e257218cf854025cfd2bd43eb4e5f17076a3e4e277ef6d06b775dc31cde7a9bc0b99aa3f2e8d6ccc3b2ddb
-
SSDEEP
768:H777WACi/nf1pYXmsVqR4Q+JVK57wH5ZLfzfjWR2nrZ95Ayu0e5n4ETT4mVcntx:H777WACi/nf1pYXmsVqR4Q+JVK57wH5k
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\8bd800b29c995aeca8b272241be077a93acd5f2d40bb0dfae26cc891ab7e709a.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB