Analysis
-
max time kernel
1151s -
max time network
1162s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
13/07/2023, 03:46
General
-
Target
aaaa.xlsx
-
Size
2.9MB
-
MD5
e38ca663e59789aed3adcae02b19609e
-
SHA1
0c932c007313dd640ee555d495dfda9d9eb78567
-
SHA256
3dcb0eb0b4bdb8da81734f0ba097b278713a2c45eee9827c2edd07d0d4060a92
-
SHA512
aade68082a09fa6278b3a0cec79fb63eed0658668e5cb9ff72fd945726bef4bb7ee8425db8a3155184a7313c26372b721b258b07280baf0144d0c823867c6f56
-
SSDEEP
49152:ysrHKG/AbHStsnyuCdGUfBkdTe0zWtPVgaRjQWUx8ILyyunb28:yaKEnSTe0zWtfQV8Oun9
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\aaaa.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB