Analysis
-
max time kernel
123s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
08-12-2022 12:49
General
-
Target
SecuriteInfo.com.Exploit.MathType-Obfs.Gen.12129.3733.xls
-
Size
267KB
-
MD5
6071443d52fc119af0d876a05c83dbba
-
SHA1
b97a01161c15e7462b13f5d65170c19984ecef0b
-
SHA256
59c1ab21cdd58b8a8d9b4cdf0b8342a874863f16b5870e1db9dd2c1423e91aa8
-
SHA512
132b1a493d4f6497f39d686a282aa97f355a6e4c181adf84d3d185530be961c402638d57164692c21c10ce6e415ece462ef33c1d4d33696ff84cbadae6673c91
-
SSDEEP
6144:HZ+RwPONXoRjDhIcp0fDlavx+W26nAek0GHm4iiGIIPaT/:iHm4iVIIPW
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Exploit.MathType-Obfs.Gen.12129.3733.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB