9ca24714deef05f67bdaeaf231a46f3407780869c1c6876a42a127fec790cd30

Analysis

max time kernel
2s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 18:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0cbc0430f09941b117079242c8c756ba.xlsm
Size

41KB
MD5

0cbc0430f09941b117079242c8c756ba
SHA1

e6fe5c1191f4a374438a6a059747645958520838
SHA256

9ca24714deef05f67bdaeaf231a46f3407780869c1c6876a42a127fec790cd30
SHA512

f5a5e0babb64b7e41497de9f6d805e975cafaca38c32343f6c0a45d0fa7185be4342ceb50f30f233d1acb30327077afc201be57307ac8d8720a1863f9fdabbd6
SSDEEP

768:S6vbfxhZhrZN0DGCfkyX3eks4pSGn0Qic3q4IEdNw8HwzP+L:S6FTGzfPeUv02phdNboY

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 6 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\MenuExt\Se&nd to OneNote\Contexts = "55"	EXCEL.EXE
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Toolbar	EXCEL.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\Toolbar\ShowDiscussionButton = "Yes"	EXCEL.EXE
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\MenuExt	EXCEL.EXE
Key created	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\MenuExt\Se&nd to OneNote	EXCEL.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Software\Microsoft\Internet Explorer\MenuExt\Se&nd to OneNote\ = "res://C:\\PROGRA~2\\MICROS~1\\Office14\\ONBttnIE.dll/105"	EXCEL.EXE

C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
"C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\0cbc0430f09941b117079242c8c756ba.xlsm
1⤵
- Modifies Internet Explorer settings
PID:1920

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1920-1-0x00000000722CD000-0x00000000722D8000-memory.dmp

Filesize
44KB

Download
memory/1920-0-0x000000005FFF0000-0x0000000060000000-memory.dmp

Filesize
64KB

Download
memory/1920-2-0x00000000722CD000-0x00000000722D8000-memory.dmp

Filesize
44KB

Download
memory/1920-5-0x000000005FFF0000-0x0000000060000000-memory.dmp

Filesize
64KB

Download
memory/1920-6-0x00000000722CD000-0x00000000722D8000-memory.dmp

Filesize
44KB

Download