Analysis
-
max time kernel
144s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
01/02/2023, 23:07
General
-
Target
bcab55594bade3a2e6b3caa80292b6da9f1b7bb11c2ae23a64501269f005345b.xls
-
Size
4.8MB
-
MD5
e974bb813319a27e4dd8da964053e3e4
-
SHA1
e8ea4fa32e8dcdabdd6dd672ec28c888656bbecd
-
SHA256
bcab55594bade3a2e6b3caa80292b6da9f1b7bb11c2ae23a64501269f005345b
-
SHA512
a220ea5c428f240d776740fbc27d13f066f37cae820b2d2438131be672b7b7266797267d845aaf4ed1b3cbbd882a94149adfbbc3c4d2f436358e77dee255e7d5
-
SSDEEP
98304:3v4K91f7vFpQ+g8RFpiLd+8kLD84tCEr0RtNiC5eSsNMt+r+WC1HnKHnn3BBXXXa:3vpvFa+g8RWLdPk/84tCEr0RtNiC5eSz
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\bcab55594bade3a2e6b3caa80292b6da9f1b7bb11c2ae23a64501269f005345b.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
16KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB