Analysis
-
max time kernel
119s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
07/11/2023, 14:32
General
-
Target
Budget Progress Report 10Q4.xls
-
Size
106KB
-
MD5
b11f9351be3db67216f1cd3d806e6c6a
-
SHA1
9b8f5084a8d99ba5c505f754eff2c5dea9e60589
-
SHA256
aa44d85e655f1470ec372be6dddd536a0ec0ef8a38c618e9a0a80aa2f43fce5a
-
SHA512
978bb3b48153430fb3aa290aa782e00041168e2c807e020c118ea39a235e227d303c77e289fcdd5ef1e8f923e70dbbc35ce5fe4d71f3ffc245d07aeca0a2c702
-
SSDEEP
3072:YDvZ+RwPONXoRjDhIcp0fDlaGGx+cL/WE4de9qkr1FbXdK:SvZ+RwPONXoRjDhIcp0fDlavx+W/WE4U
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Budget Progress Report 10Q4.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB