Analysis
-
max time kernel
101s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
14-11-2023 07:58
General
-
Target
NEAS.442fce0d1a2dd3f042d6c64b6965f55590ad7774ccfe8d8a4893f4e444bea8b4.xlam
-
Size
6KB
-
MD5
c75cca43891c0ac1943c9e6394078cc5
-
SHA1
2046b59b6576e6607c51053b915c807a67596730
-
SHA256
442fce0d1a2dd3f042d6c64b6965f55590ad7774ccfe8d8a4893f4e444bea8b4
-
SHA512
3dd14c80484612a218e4397819134085088c6900ccd26d95512b44647fdfcf3eaefc6cfc40f35b7f4e61813ca618c4489895bbc06d1106903ba19a9b123d05b9
-
SSDEEP
96:+/Y7yb8fvZ4YcTjiMhVVCvkwQEeGIRf3UNa52ZUnfFllCPotUYuL9cSlYJV5Vhc:+A7yb8p4LOOV8vdQjm4nNKNYuCSlcrVm
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 10 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\NEAS.442fce0d1a2dd3f042d6c64b6965f55590ad7774ccfe8d8a4893f4e444bea8b4.xlam"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB