Analysis
- max time kernel
314s - max time network
621s - platform
windows10-1703_x64 - resource
win10-20240611-en - resource tags
- submitted
12/06/2024, 15:11
General
- Target Graphing data.xlsx
- Size 7.6MB
- Sample240612-skwkdatckm
- SHA256 3eb94783cb0063c9fb90a79f8a157e315f627bd60e5bcfc4c426aa90b6069f1a
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 3 IoCs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of FindShellTrayWindow 2 IoCs
- Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Graphing data.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
temp.User.zip
memory/4892-0-0x00007FF89C630000-0x00007FF89C640000-memory.dmp
memory/4892-2-0x00007FF89C630000-0x00007FF89C640000-memory.dmp
memory/4892-1-0x00007FF89C630000-0x00007FF89C640000-memory.dmp
memory/4892-6-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-7-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-8-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-3-0x00007FF89C630000-0x00007FF89C640000-memory.dmp
memory/4892-9-0x00007FF899560000-0x00007FF899570000-memory.dmp
memory/4892-10-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-11-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-13-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-15-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-14-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-12-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-19-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-20-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-22-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-23-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-24-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-25-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-26-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-27-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-21-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-18-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-17-0x00007FF899560000-0x00007FF899570000-memory.dmp
memory/4892-16-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-326-0x0000021B34AC0000-0x0000021B34C62000-memory.dmp
memory/4892-434-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-435-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-436-0x0000021B376D0000-0x0000021B3A130000-memory.dmp
memory/4892-437-0x0000021B34F10000-0x0000021B351A4000-memory.dmp
memory/4892-438-0x0000021B1BFC0000-0x0000021B1C01C000-memory.dmp
memory/4892-439-0x0000021B351B0000-0x0000021B35372000-memory.dmp
memory/4892-440-0x0000021B19AD0000-0x0000021B19AF2000-memory.dmp
memory/4892-442-0x0000021B36110000-0x0000021B36EA0000-memory.dmp
memory/4892-443-0x0000021B19A20000-0x0000021B19A30000-memory.dmp
memory/4892-444-0x0000021B19B70000-0x0000021B19B7A000-memory.dmp
memory/4892-445-0x0000021B19B40000-0x0000021B19B62000-memory.dmp
memory/4892-446-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-448-0x0000021B3E450000-0x0000021B42766000-memory.dmp
memory/4892-449-0x0000021B19B80000-0x0000021B19BA8000-memory.dmp
memory/4892-451-0x0000021B1C070000-0x0000021B1C0C0000-memory.dmp
memory/4892-453-0x0000021B19A30000-0x0000021B19A40000-memory.dmp
memory/4892-454-0x0000021B1C020000-0x0000021B1C038000-memory.dmp
memory/4892-456-0x0000021B1C150000-0x0000021B1C1AA000-memory.dmp
memory/4892-457-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-464-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-465-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-466-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-463-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-505-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-516-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-549-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-550-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-552-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-553-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-551-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-646-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-882-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-883-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-884-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-887-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp
memory/4892-890-0x0000021B44C40000-0x0000021B45166000-memory.dmp
memory/4892-912-0x0000021B35E20000-0x0000021B35F1C000-memory.dmp
memory/4892-1015-0x00007FF89C630000-0x00007FF89C640000-memory.dmp
memory/4892-1016-0x00007FF89C630000-0x00007FF89C640000-memory.dmp
memory/4892-1018-0x00007FF89C630000-0x00007FF89C640000-memory.dmp
memory/4892-1017-0x00007FF89C630000-0x00007FF89C640000-memory.dmp
memory/4892-1019-0x00007FF8DC5A0000-0x00007FF8DC77B000-memory.dmp