Analysis
-
max time kernel
103s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
25-11-2022 18:22
General
-
Target
6bdce022429c88e32eb369fe83230de7ff1eba7d7045598e5816bac0b3aa9e11.xls
-
Size
775KB
-
MD5
c85efb03f6955cb656db4a46c26c1f0b
-
SHA1
4eac77e40bba143c04a90001c322d7362ab0f0d6
-
SHA256
6bdce022429c88e32eb369fe83230de7ff1eba7d7045598e5816bac0b3aa9e11
-
SHA512
76c9c1f31b28ff9896b4629d2327ff67ab2d1a6e4e57d91a2a888f8eef82d08e9305de5b27d7d8f0dbf04a9e69bfffab813a5314a544567ed9922a06918d4f42
-
SSDEEP
6144:5PCFnk4dLc6ow+14huxuVuflJOIuxuVuflJOZ:5PCFnkwgw2MuxuVufFuxuVufY
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 9 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\6bdce022429c88e32eb369fe83230de7ff1eba7d7045598e5816bac0b3aa9e11.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB