Analysis
-
max time kernel
131s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
22/07/2024, 06:26
General
-
Target
D47 PP Scope.xlsm
-
Size
83KB
-
MD5
17257c42501d95597fa12ba2d5008eb5
-
SHA1
0f22952765bc4d9db8068c5c51aa80a698b83ea9
-
SHA256
3696651f8093dc86900f1a0b16d1d64bab01b93a5fadd7e6182b1b277f9480d2
-
SHA512
66a3c8de54a6b51c77f22acf4c543af6afc85fc2302423506213bb1a454e7a5b66c932f82353065b5f8830aea85e5b4e371f43d1cfa57aeaa8265313a5ae6cf1
-
SSDEEP
1536:9Jmd3+VFWRzdAjyyz8Sk33unveF1MzMgNzG1lN1xwuQa8o1mhT:7mdRRGjBa3WWF1MogN+1xwuQabmhT
Score
1/10
Malware Config
Signatures
-
Office loads VBA resources, possible macro or embedded object present
-
Enumerates system info in registry 2 TTPs 1 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde "C:\Users\Admin\AppData\Local\Temp\D47 PP Scope.xlsm"1⤵
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB
-
Filesize
64KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
44KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB