Resubmissions

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/05/2024, 00:06

General

  • Target

    macro-docs/Space Pirate Code of Conduct.xls

  • Size

    34KB

  • MD5

    22eddfb2ef7840d63fe049b70226e957

  • SHA1

    f92b4fb84e7a164b27b65e2eff390fd1015f9cbe

  • SHA256

    3f1564a4ea3e098805802d53cf6b43b97e5f8b0d1442f68adba9eea8bcf5da04

  • SHA512

    590033896dcadc11394d0517f9c49d7621239098e15bd78d122970e9838c86ccf93894bdfecafbffb51f91a35c743b2ac7f234cb763fafb60d9ef291789ab0c6

  • SSDEEP

    768:dYeSFsv66g3KnF439NKC54kkGfn+cL2XdA81FEwghZmE6mci:dTSFsv66g3KnF439NKC54kkGfn+cL2Xi

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\macro-docs\Space Pirate Code of Conduct.xls"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:2396

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2396-0-0x00007FFF98550000-0x00007FFF98560000-memory.dmp

    Filesize

    64KB

  • memory/2396-2-0x00007FFF98550000-0x00007FFF98560000-memory.dmp

    Filesize

    64KB

  • memory/2396-3-0x00007FFFD856D000-0x00007FFFD856E000-memory.dmp

    Filesize

    4KB

  • memory/2396-5-0x00007FFF98550000-0x00007FFF98560000-memory.dmp

    Filesize

    64KB

  • memory/2396-4-0x00007FFF98550000-0x00007FFF98560000-memory.dmp

    Filesize

    64KB

  • memory/2396-1-0x00007FFF98550000-0x00007FFF98560000-memory.dmp

    Filesize

    64KB

  • memory/2396-7-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-6-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-8-0x00007FFF96100000-0x00007FFF96110000-memory.dmp

    Filesize

    64KB

  • memory/2396-10-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-9-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-12-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-11-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-15-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-14-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-13-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-19-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-20-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-22-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-21-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-18-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-17-0x00007FFF96100000-0x00007FFF96110000-memory.dmp

    Filesize

    64KB

  • memory/2396-16-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-37-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB

  • memory/2396-50-0x00007FFF98550000-0x00007FFF98560000-memory.dmp

    Filesize

    64KB

  • memory/2396-51-0x00007FFF98550000-0x00007FFF98560000-memory.dmp

    Filesize

    64KB

  • memory/2396-53-0x00007FFF98550000-0x00007FFF98560000-memory.dmp

    Filesize

    64KB

  • memory/2396-52-0x00007FFF98550000-0x00007FFF98560000-memory.dmp

    Filesize

    64KB

  • memory/2396-54-0x00007FFFD84D0000-0x00007FFFD86C5000-memory.dmp

    Filesize

    2.0MB