Analysis
-
max time kernel
47s -
max time network
33s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
07-06-2024 03:17
General
-
Target
eabfa524c46a14c416dfdc12f9dd745a25114b156d86914e8b2e9ffc7ec4d666.xls
-
Size
33KB
-
MD5
7a4d20725c93b774678abc86c74c26aa
-
SHA1
e7e30b07daa513d3207db4d648cdcace71a725c4
-
SHA256
eabfa524c46a14c416dfdc12f9dd745a25114b156d86914e8b2e9ffc7ec4d666
-
SHA512
7b5e3d53cefdf899aef5b1ab29e8ff6d6bf775a5a2d68a03c6da2cd0b64aa162c790fb92e73376eab4f4850e78afaf7e84fcdc55ccdd1386fd924f77a25e66ca
-
SSDEEP
768:wwvd1g6xEtjPOtioVjZUGGnwfDlaGGx+cL2QdiANoxQj6E0Oxz5oidhhear:fHxEtjPOtioVjZUGGnwfDlaGGx+cL2Qx
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\eabfa524c46a14c416dfdc12f9dd745a25114b156d86914e8b2e9ffc7ec4d666.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB