Analysis
-
max time kernel
101s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
10-04-2024 13:18
General
-
Target
a8da877ebc4bdefbbe1b5454c448880f36ffad46d6d50083d586eee2da5a31ab.xll
-
Size
729KB
-
MD5
feca1b74d39cc8cf7219ecd8264c3fca
-
SHA1
9f69f4c0791f2233d4777bcd54e54be063136a1c
-
SHA256
a8da877ebc4bdefbbe1b5454c448880f36ffad46d6d50083d586eee2da5a31ab
-
SHA512
d51956d3839315eb4f9b3f5cd0f9673407088e5948549ec7e74e900c87b2b9b13a1debb24e5ec0e997d3d2a266272e63841ee910836319dd072152b85b70be22
-
SSDEEP
12288:CdiPGGZlhMYLc8bzbBSreLGOZBVCjeEQGW9qsVK1vzJTwHEmGiQttB58IMkFEdCj:Cd6lyKPX1bnwuTUki/
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\a8da877ebc4bdefbbe1b5454c448880f36ffad46d6d50083d586eee2da5a31ab.xll"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB