Analysis
-
max time kernel
163s -
max time network
196s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
25-11-2022 19:25
General
-
Target
Աϱϸ/370727194706280682.xls
-
Size
13KB
-
MD5
381d9d6f0d072ea5bb06ff9770ba69a1
-
SHA1
c17a45e1171bf7bc38ad759c48f3090622da6d6b
-
SHA256
96793f6ef2a5c6671b87454701941c7517206047f96b9bcf04f2ebf8ad6dcde2
-
SHA512
bd35618f1abc6aec181177b5b49ccdec418a176919576ac6892f5bf41dea2598034f6f7e3154056dee66d14dca6523ac3f68ba0cd6e0971bb9ceb717451b1c36
-
SSDEEP
48:rYLZgDTREzPS3g3PrMtmF06/mcg4fVqmYU3+:UqDdEGQzMQschO
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Աϱϸ\370727194706280682.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB