Analysis
-
max time kernel
151s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
29/11/2022, 14:40
General
-
Target
1fb1fe43d58e1e9a0f1e983cd97b5fc0c65800a13249627314a7d123aa962457.xls
-
Size
52KB
-
MD5
1c0bbf9fb14c9561bb2026e7aac6a1dd
-
SHA1
701f87eec147a14d749cd205b3228e278d8e52d6
-
SHA256
1fb1fe43d58e1e9a0f1e983cd97b5fc0c65800a13249627314a7d123aa962457
-
SHA512
365973e0e6c6c943aa66d20c05aed3df9b2412fcfa89b3c6e3e6118c8636ce31211e8e20e49f952dbddb3ca207899fc11acbfa15dbafc8d9a89e42c474999c72
-
SSDEEP
768:PQlzYZR2S/rgzp2/00UnmUjYUkwHKTBRJFHclG6BYcYxKoWKpCKS8AaNh0HXwfFU:PQlzY8mSbkthlhPdwSxuTZK6Vcn7adz
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 18 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\1fb1fe43d58e1e9a0f1e983cd97b5fc0c65800a13249627314a7d123aa962457.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB