Analysis
-
max time kernel
121s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
24-11-2022 07:57
General
-
Target
db811669cf2bdb29e269bbe41e918cf03282f109e2f43628109d9f2f00f4203a.xls
-
Size
27KB
-
MD5
7b20eece5cb0421448f3b3baf3561804
-
SHA1
dc43c87b3784e29896bfe6a419047d8c55fea965
-
SHA256
db811669cf2bdb29e269bbe41e918cf03282f109e2f43628109d9f2f00f4203a
-
SHA512
a4946b5b1d9ccf839b5db084624eba6ae591fc2e07ab98b80cb4eeb1702758891b016038ef832566a69733fcd866b24d22f9944232300fb4e4d6140b1646e699
-
SSDEEP
192:kD8TfRj43Zg+LzUBgzinzbUOcWTvlHUu1oY7kJaf7tC:PTfRPgcTVZHXfkJac
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\db811669cf2bdb29e269bbe41e918cf03282f109e2f43628109d9f2f00f4203a.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB