Analysis
-
max time kernel
145s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
28-12-2022 04:39
General
-
Target
Instalador SisFarmacia V4.0/Software para Famacias - Archivos Excel/Categoria de Productos.xls
-
Size
59KB
-
MD5
8ae5884d067807584108c1eae14a0888
-
SHA1
64d2b3240735d3cc4825980bed998b2e9f0dbfab
-
SHA256
ce18bd9dd22bed73a9149e2a1ca720902ecac0359cc437d65b2d851de749c7b9
-
SHA512
47d4e45bd8aefab484c808dab999db1d7b550133434018069c4505d819d2efd64cd45f6a8f8f09a5e6da6c70b201c9dee1f982366158f4ac3b3788d1dafb7074
-
SSDEEP
1536:JLP+SKabAk0BuqCXlg+/fs5cClfZw2gmVXqEQ9mcZcbUpXGJ:JLP+SKa85Y11//fs5cClfZw2gmVXqEQm
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Instalador SisFarmacia V4.0\Software para Famacias - Archivos Excel\Categoria de Productos.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB