Analysis
-
max time kernel
144s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
25-11-2022 19:33
General
-
Target
C1389074Ѷ-()/·ռ¼ܱ.xls
-
Size
19KB
-
MD5
e3a9972e1820fe479b19bb39bc3f93eb
-
SHA1
ac9987dc8172eebde22b5433e798c0a809306392
-
SHA256
9aa83fb541ce4df03315c7811b664bddfdc38ee0b207aa79bdeedf266add1dbb
-
SHA512
8fc6e8ee3456ab01cc0a9e1e1426a62e22ca4c5c1a48f7d34b9c7fe696b0dbfeabbe8799a73451b12410dc88c0e8d3cb3d13a55716e304d12d350f33539caa87
-
SSDEEP
384:/a+++HzJtV8cLbsQvPe8k1SzmEeqWbNvT2rXrN8AHbKdXAKypsqPoZ9AFJNQPoa7:/a+++HzJtV8cLbsQvPe8k1SzmEeqWbNd
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\C1389074Ѷ-()\·ռ¼ܱ.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB