Analysis
-
max time kernel
148s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
29/11/2022, 14:40
General
-
Target
6ff475ab1a65f3df88dcefe927927b17abca53e39b3b3cca0c9bd544ef50f7e3.xls
-
Size
27KB
-
MD5
60390591a36380baee06a10f4080406d
-
SHA1
d3294cc94687875b5584857ee9b00d330c074546
-
SHA256
6ff475ab1a65f3df88dcefe927927b17abca53e39b3b3cca0c9bd544ef50f7e3
-
SHA512
3266382d4d8bef0c0b2243ae3cd12517efe1d005c849f16d90d4b6f8c530fc279f10b5891a3f77f42ddefd729e1aac0a13235b451086f30fcb482dbf9284b980
-
SSDEEP
384:vnPPPJLgz/q3R25o/54fnrXYHLFj4HxE+/X7Nu4u:vnPPPJLgz/q3R25o/54fzzHxR7EJ
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\6ff475ab1a65f3df88dcefe927927b17abca53e39b3b3cca0c9bd544ef50f7e3.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB