Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
03-06-2024 18:02
General
-
Target
Device/HarddiskVolume3/Users/HoaWalsh/Downloads/CustomerImportTemplate (2).xlsm
-
Size
236KB
-
MD5
721ee6b11f003b2257c5b8966b2a8455
-
SHA1
5b523abc7b334f82026aa4198846d094ea587b21
-
SHA256
d46b14fe4f3acb2b0a83e0f9527b2d48794bf71d91889a435cdd6a1091363e84
-
SHA512
7458037af444507464ed35b62c3646d0c9df2a8c972a252f4ce7a15553bb14cf17825271b3d13393012eef341d64d29a6e934b8c21494671b17c9b4ab033398c
-
SSDEEP
6144:xIBPDRl4zXaiscnEOTnM1UdwXORYVAnMFFqL:xIBP1l+q2HbjwsYnC
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Device\HarddiskVolume3\Users\HoaWalsh\Downloads\CustomerImportTemplate (2).xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB