Analysis
-
max time kernel
100s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
25-11-2022 19:33
General
-
Target
C1389074Ѷ-()//˵ȷ.xls
-
Size
23KB
-
MD5
8db198c1798a3d2e4f3793769a906618
-
SHA1
94e70446bb535474e1e22be4b8e8b8a0e56d639a
-
SHA256
2aca9c1e740e53b1cb4c7622ee5f82c61dfb8552c9d647d97171cb7dfa1abbce
-
SHA512
3bd52d5888a156afcdc3b474eb69f14704a3e4b66add64555516889291968f188f38848a39c629e154f6067a97ef38ece6fec93d4f4a2560c7b5186b00b3eeb4
-
SSDEEP
384:KxxxK3Eg8NIMFLTVYwxrjQtz9Z+/hph8Zwa/bKrNXAKu6sMPoY+xQocfEAI2OzOL:KxxxK3Eg8NIMFLTVYwxrjQtz9Z+PLEAY
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\C1389074Ѷ-()\\˵ȷ.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB