Analysis
-
max time kernel
140s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
14-07-2023 01:06
General
-
Target
Malware_Polimorfico/archivos encriptados/1103790 PARCIAL II.xlsx
-
Size
50KB
-
MD5
e1a5e4de350a73dc80e2a87124c325b6
-
SHA1
5119a0ee9ab484353f1f10e4d64feedb52ed36c9
-
SHA256
3ffcd3e2fe18fa133ee1c26ed18e7291b6a969485a0d9f574d18be227dbfc5ef
-
SHA512
33363fe8b85ad035b0c8a559010a9ee13fa112c4c80ea4a0ca17c5fddde5f279604c0ab0e7b955dd1ae5ffa803fe472abeab388d2c707e0c1df1fb72cb0312ba
-
SSDEEP
768:0su2d2YnAh2AhPyfWx2f//ssr4Z9LPVLEl0bIdIgsHyF379kRZOFWhLm:5u2dZS2mK+x2f//rE9zSXmHyFr9kRtK
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Malware_Polimorfico\archivos encriptados\1103790 PARCIAL II.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB