Analysis
-
max time kernel
24s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
01-08-2024 21:28
General
-
Target
a2d3e6540011d12afc6a66d0d0d06f14135167debb7d3fa34cc3b84254b94aea.xlsm
-
Size
92KB
-
MD5
98996f86c1c26721e20ab6645661a6b8
-
SHA1
5199ab6d7d7458f2b4be4ad15504a360a559fd0c
-
SHA256
a2d3e6540011d12afc6a66d0d0d06f14135167debb7d3fa34cc3b84254b94aea
-
SHA512
88311923fc81a67d25a0938c223422fc91c69f9c6c7a57cb5b04f40d64583f57fb49980be7b5964487f1cb452d9aa014aa3629f092dd4f22641fa872eca611af
-
SSDEEP
1536:CguZCa6S5khUIOVpL7mxB4znOSjhLM+vGa/M1NIpPkUlB7583fjncFYIIeFB:CgugapkhlOVx7mxBaPjpM+d/Ms8ULav6
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Office loads VBA resources, possible macro or embedded object present
-
Enumerates system info in registry 2 TTPs 1 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\a2d3e6540011d12afc6a66d0d0d06f14135167debb7d3fa34cc3b84254b94aea.xlsm1⤵
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB
-
Filesize
64KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
44KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB