Analysis
-
max time kernel
153s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
25/11/2022, 18:23
General
-
Target
44a83ef649faabc81a6d28c3ee083249cd94fea47c1ddf03b085046b12580795.xls
-
Size
14KB
-
MD5
c9474555203d285724e41cd76fffc317
-
SHA1
16fce67ac9c65021da2b92e8948bdfba60b4fc60
-
SHA256
44a83ef649faabc81a6d28c3ee083249cd94fea47c1ddf03b085046b12580795
-
SHA512
c49ebc70d68145e2640ee00b8856305f02a9f23c9770f71a89e6b5b6908ac1b112d4e947217b0fcc30e83d89e0cc0f272a9a354203f4317ab661ba86a9739aff
-
SSDEEP
192:KPjpepepepepMKpz8U6R278hhPPPPPPPPPPW42uGvvIKY7x5:awwwwld8U6R2ngG3IKYl5
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\44a83ef649faabc81a6d28c3ee083249cd94fea47c1ddf03b085046b12580795.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB