Analysis
-
max time kernel
206s -
max time network
231s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
25-11-2022 19:17
General
-
Target
1a9acd24cd71da39feef884dd6750525bf6f79a850bdc22dbed7db5f026d6523.xls
-
Size
13KB
-
MD5
fea0d535468aab98d9d9f06a21fcccfa
-
SHA1
7521212dc76432275d526ce8a296e81dd816a581
-
SHA256
1a9acd24cd71da39feef884dd6750525bf6f79a850bdc22dbed7db5f026d6523
-
SHA512
78016b766f8b64757163883eb5d7d500338b97c7d55a978ab7d6216c9fd5cfbf6e46f46f0c4ca4137401e87b4a7851e7e236d9796100669841f1aed288fb0a6d
-
SSDEEP
48:rYLZgDTR+lAXS3qKIR+PIxIoGzt8XbcQ4fVqcAgUl+dQuhlt5bWFggMU3+:UqDd+lxaK5XycbAgs0hzt59UO
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\1a9acd24cd71da39feef884dd6750525bf6f79a850bdc22dbed7db5f026d6523.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB