Analysis
-
max time kernel
24s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
01-08-2024 21:03
General
-
Target
95b151e145e805673b2ad155e6c436da2b1e41a58c73d1f4de5e913b9c9768d5.xlsm
-
Size
92KB
-
MD5
302bdd891769ef9b5bb8aa58a102d04d
-
SHA1
75ab3bd419feafb13d90d74aac6cb1a718bea060
-
SHA256
95b151e145e805673b2ad155e6c436da2b1e41a58c73d1f4de5e913b9c9768d5
-
SHA512
5226bb7affd05711e26aa7642aeed349627f4c6913afe34a6f88ce23b2fe011656241120bcb6eb5fe35a29bb0bc0068f4efe9b26b371cb1f121a79ed63066f68
-
SSDEEP
1536:CguZCa6S5khUIKDOChxJ42J4znOSjhLM+vGa/M1NIpPkUlB7583fjncFYIIRFS:CgugapkhlyO+xJBJaPjpM+d/Ms8ULavO
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Office loads VBA resources, possible macro or embedded object present
-
Enumerates system info in registry 2 TTPs 1 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\95b151e145e805673b2ad155e6c436da2b1e41a58c73d1f4de5e913b9c9768d5.xlsm1⤵
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
44KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
44KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB