Analysis
-
max time kernel
154s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
03-12-2022 12:41
General
-
Target
cd22306bde7a2e7a11dc1b99718972170416e1eac1792e078d5403b0c2788582.xls
-
Size
36KB
-
MD5
8d00a76ef5a5de958d2cb8356cd54f62
-
SHA1
8c8bbca7638b0a9c9cc10e758f5582156baf8452
-
SHA256
cd22306bde7a2e7a11dc1b99718972170416e1eac1792e078d5403b0c2788582
-
SHA512
f9edd987423db78c78bfee63d11b8230133da915dd6fcf6cb9415d5c2869e2eb28a3f7234078161819038ae1aebf7153e78f9b0140678565a0fe1ff6bcfdabce
-
SSDEEP
768:MLLLLdW65HogJOsheWC5Fa6LJFhAXWz/DHGxR2w7r9OnsA2sXK0a4o5pR:MLLLLdW65HogJOsheWC5Fa6LJFhAXWzm
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\cd22306bde7a2e7a11dc1b99718972170416e1eac1792e078d5403b0c2788582.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB