Analysis
-
max time kernel
141s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25-01-2024 03:20
General
-
Target
Ingreso a contratistas 2024.pptx
-
Size
773KB
-
MD5
e818a6c7e196f3a10d740b1076d235b2
-
SHA1
f20e0aacf200c467a28d0d446e9c4da93551f106
-
SHA256
0d87c95bafef40a7284bbc3c8ecca1bb94cf3f014cf64493ce0abe75d4ad942e
-
SHA512
9b473014b5aa1d4d3e6550e5c6374b236a6eddb60af4fdf14087226358031606c6b9231e4ec4c6cbbfebae7832facb9da294af92eddc5ceb568ed2a149de54f7
-
SSDEEP
12288:4BbckgdIGYQcxunohp1HLT2EB/d1yloAR5oUBNRi8P1kijyZpzY1UOeGEKtvLX9A:scpKp1HLLBF1E59P1XM9ENqXtOO
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE"C:\Program Files\Microsoft Office\Root\Office16\POWERPNT.EXE" "C:\Users\Admin\AppData\Local\Temp\Ingreso a contratistas 2024.pptx" /ou ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB