Analysis

  • max time kernel
    47s
  • max time network
    34s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/05/2024, 05:03

General

  • Target

    3ef14553cf66009154f055fa13b0eb96add0416c27789227107c127bdb2be36f.xls

  • Size

    28KB

  • MD5

    64e26dcb8040b802dda32d45b1d99d5c

  • SHA1

    3e4ad9c2bd070c4f35dcd7531e4ce3779dd9f77d

  • SHA256

    3ef14553cf66009154f055fa13b0eb96add0416c27789227107c127bdb2be36f

  • SHA512

    f9f5dd826878e21bb72474b4d2375f585f88b776bef87fe4b90a8342e0c4410708e8befba6be3e260884ca9630d5d0c73a058640f6c4442effc9dbc21454708b

  • SSDEEP

    768:ofNZpwKXsyz5ugNvIPyfFusNfkqj5uAqk3hOdsylKlgryzc4bNhZFGzE+cW/gEAP:cNZCKXsyz5ugNvIPyfFusNfkqj5uAqkH

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\3ef14553cf66009154f055fa13b0eb96add0416c27789227107c127bdb2be36f.xls"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:2888

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2888-2-0x00007FF9ED230000-0x00007FF9ED240000-memory.dmp

          Filesize

          64KB

        • memory/2888-1-0x00007FF9ED230000-0x00007FF9ED240000-memory.dmp

          Filesize

          64KB

        • memory/2888-3-0x00007FF9ED230000-0x00007FF9ED240000-memory.dmp

          Filesize

          64KB

        • memory/2888-4-0x00007FF9ED230000-0x00007FF9ED240000-memory.dmp

          Filesize

          64KB

        • memory/2888-6-0x00007FFA2D1B0000-0x00007FFA2D3A5000-memory.dmp

          Filesize

          2.0MB

        • memory/2888-5-0x00007FFA2D24D000-0x00007FFA2D24E000-memory.dmp

          Filesize

          4KB

        • memory/2888-0-0x00007FF9ED230000-0x00007FF9ED240000-memory.dmp

          Filesize

          64KB

        • memory/2888-8-0x00007FFA2D1B0000-0x00007FFA2D3A5000-memory.dmp

          Filesize

          2.0MB

        • memory/2888-7-0x00007FF9EAF40000-0x00007FF9EAF50000-memory.dmp

          Filesize

          64KB

        • memory/2888-11-0x00007FFA2D1B0000-0x00007FFA2D3A5000-memory.dmp

          Filesize

          2.0MB

        • memory/2888-13-0x00007FFA2D1B0000-0x00007FFA2D3A5000-memory.dmp

          Filesize

          2.0MB

        • memory/2888-14-0x00007FFA2D1B0000-0x00007FFA2D3A5000-memory.dmp

          Filesize

          2.0MB

        • memory/2888-16-0x00007FFA2D1B0000-0x00007FFA2D3A5000-memory.dmp

          Filesize

          2.0MB

        • memory/2888-15-0x00007FFA2D1B0000-0x00007FFA2D3A5000-memory.dmp

          Filesize

          2.0MB

        • memory/2888-12-0x00007FFA2D1B0000-0x00007FFA2D3A5000-memory.dmp

          Filesize

          2.0MB

        • memory/2888-10-0x00007FFA2D1B0000-0x00007FFA2D3A5000-memory.dmp

          Filesize

          2.0MB

        • memory/2888-9-0x00007FFA2D1B0000-0x00007FFA2D3A5000-memory.dmp

          Filesize

          2.0MB

        • memory/2888-17-0x00007FF9EAF40000-0x00007FF9EAF50000-memory.dmp

          Filesize

          64KB

        • memory/2888-27-0x00007FFA2D1B0000-0x00007FFA2D3A5000-memory.dmp

          Filesize

          2.0MB

        • memory/2888-28-0x00007FFA2D1B0000-0x00007FFA2D3A5000-memory.dmp

          Filesize

          2.0MB

        • memory/2888-37-0x00007FFA2D1B0000-0x00007FFA2D3A5000-memory.dmp

          Filesize

          2.0MB