Analysis
-
max time kernel
191s -
max time network
201s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
28-11-2022 07:31
General
-
Target
Quotation.xls
-
Size
1.0MB
-
MD5
3f5c31cf5226d134e89e9475620dc6bf
-
SHA1
a7752305ef380aeb456519fe5baf560f182ffde6
-
SHA256
4acbc850dfb8cd82c99f919af858e5688b326ef3d976269a6f71fe7431961373
-
SHA512
3e24d104fd912e853d196728300274721349224eeb1b5b4af81147b195d56d8013fe130d049f59700218a5b30d5f3045758a2899f0d3509d07a677aa0facfeb5
-
SSDEEP
24576:yr5XXXXXXXXXXXXUXXXXXXXSXXXXXXXXjmYr5XXXXXXXXXXXXUXXXXXXXSXXXXXi:nFt/LRv
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Quotation.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB