Analysis
-
max time kernel
152s -
max time network
173s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
05/12/2022, 07:08
General
-
Target
dc0dd3150a7debf3a7ecb1e28c15b2dce8dce03ce6daec0f07734461c88f4b2b.xls
-
Size
42KB
-
MD5
4e7d160af41d8608f19d1be899243f6d
-
SHA1
c135183c68fde77cd4eb1834336b225472f300e0
-
SHA256
dc0dd3150a7debf3a7ecb1e28c15b2dce8dce03ce6daec0f07734461c88f4b2b
-
SHA512
d613a96acfd238eccf3651ebb55143e7cc0c1739a48ae42cb4d385dcc865a8dfe0046ee963fd189496062c1fe6cc34b5d8f7a72e1a324b4f3d0b252b8e423b0c
-
SSDEEP
768:KppppF600ejjXNnORoh7fRkKMEsHQoWfjN7SwRBCge:KppppF60tORmTMwoW7Nte
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 20 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\dc0dd3150a7debf3a7ecb1e28c15b2dce8dce03ce6daec0f07734461c88f4b2b.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
8KB
-
Filesize
8KB