Analysis
-
max time kernel
136s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
26/04/2023, 11:33
General
-
Target
Doc. TAUR/0 - Fascicolo Tecnico/D11.02_TAU_001_DM_RESS_01.xlsx
-
Size
79KB
-
MD5
3233ec47c39603c852e05d838e10d615
-
SHA1
3e8c94a083d7de3e78513026ea035d694e2c26bd
-
SHA256
ca449d098cbc5efc2ca10c0fc4d64f00f4157541f9f23a9537bd8d030378e327
-
SHA512
fd26dfef36b3cbd40e694c4b27abd46bc001b6374bc829943e8295579eb36cf5e460cbd69e7ff2bcf5b8c3450ea5ead6944cfdbf6367657e4e71126cac6e3894
-
SSDEEP
1536:mKmfNqIcu6VESmGU+ljjxJ/7JSIxG2d43EA:mKmNqI+VHUXu3A
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Doc. TAUR\0 - Fascicolo Tecnico\D11.02_TAU_001_DM_RESS_01.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB