Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
09-06-2024 00:11
General
-
Target
5aafaa20935b218b12f2bfe50e0db39a14edd317baa7078917ca27a2c565c6c5.xll
-
Size
851KB
-
MD5
701bdf72f5871dae06f0073198d3071c
-
SHA1
66868f2807ae2bf3f3dbf9f0ff6a8750af309e44
-
SHA256
5aafaa20935b218b12f2bfe50e0db39a14edd317baa7078917ca27a2c565c6c5
-
SHA512
f3363bc71d5b05cc1cdb83e24ff2bec2c6063a0b7a9f58282a2eb45b11701c174ea74d0e4d1dc98d9464767e17c7a4c24930c188aad7a16e3cb3ebab799b5c80
-
SSDEEP
12288:SG1N4HkcgMsiOd58bzbBSrerQ0uqSiYJLmTbwJv/jFjH2bizD1reWabd/:SoOOMX1b+tsTbw1/5jBHT+d
Malware Config
Extracted
Signatures
-
Loads dropped DLL 2 IoCs
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\5aafaa20935b218b12f2bfe50e0db39a14edd317baa7078917ca27a2c565c6c5.xll"1⤵
- Loads dropped DLL
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
851KB
MD5701bdf72f5871dae06f0073198d3071c
SHA166868f2807ae2bf3f3dbf9f0ff6a8750af309e44
SHA2565aafaa20935b218b12f2bfe50e0db39a14edd317baa7078917ca27a2c565c6c5
SHA512f3363bc71d5b05cc1cdb83e24ff2bec2c6063a0b7a9f58282a2eb45b11701c174ea74d0e4d1dc98d9464767e17c7a4c24930c188aad7a16e3cb3ebab799b5c80
-
Filesize
1KB
MD578aac6162eb966072983454dffcfffbd
SHA1075f520e41e5f31652a0adb02e43b3eb539e42f2
SHA25601eed591a97c96a357156d9561be93fafffb7928ffe570f41b492ceee20a2a0d
SHA512e55751672b7887c37909221e4e46b4a08ab3a116f6921115d4e519e750be6e8843db564f84ab5ac6da121f1b5556e10148e379cf391a35ba31f64777c16bbd30
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
80KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
320KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
940KB
-
Filesize
80KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
712KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
136KB
-
Filesize
1.5MB
-
Filesize
240KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
1.5MB
-
Filesize
136KB
-
Filesize
720KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB