Analysis
-
max time kernel
117s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
25/11/2022, 18:23
General
-
Target
ecd80034c0cc0c0365c07360009b627caa6b567b3bf16ec48b18dd4fae0de9fb.xls
-
Size
22KB
-
MD5
31b25e5b4a032a351d9e08d5d974fdac
-
SHA1
788265b80bae4a4ecdc3d101b904963bebb61a67
-
SHA256
ecd80034c0cc0c0365c07360009b627caa6b567b3bf16ec48b18dd4fae0de9fb
-
SHA512
af826cf7879db1aa7e962acb4f2a2d43d7b1e81e5f0e170bb0fa7b423b9fc6dfddccae6e9ba1c0c3247df147c52eb561d7ddc356b7a12a957e8831689c12850f
-
SSDEEP
384:eLeeeJz8Vekbvyc8teq1sQPk5sCqKet5FlDeCx1YzhCY8jiktm0OWuDvetmUwRVf:geeeJz8Vekbvyc8teq1sQPk5sCqKej5q
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\ecd80034c0cc0c0365c07360009b627caa6b567b3bf16ec48b18dd4fae0de9fb.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB