Analysis
-
max time kernel
260s -
max time network
272s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
05-12-2022 14:23
General
-
Target
a6a38716fa159d2d54cc2a085f243bbf6d924407e500e43e7b9c161ca59c5883.xls
-
Size
92KB
-
MD5
c87200171a3d5da3f90b475f1cfed309
-
SHA1
5bdb3a3a41a4d9901d90bfb14930de7fc1492070
-
SHA256
a6a38716fa159d2d54cc2a085f243bbf6d924407e500e43e7b9c161ca59c5883
-
SHA512
ce9fd5238768d2104e4f9795c52630f3f8cf46f06bf14c28df35c0a4fee905b0bb01bd602b43416aff15e8d8e1a4dac5ffd6abbdc9b00272b48adc0ffaa51697
-
SSDEEP
1536:Ieee1SsQvPe8zkJtV8cbqQ+mQpZskVjmYq7V1GWVbrzQ7ITkLDdv0A2YBLIY7nJH:mQVUWVbrzQ7ITkUOR7JtXwq
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\a6a38716fa159d2d54cc2a085f243bbf6d924407e500e43e7b9c161ca59c5883.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB