Analysis

  • max time kernel
    47s
  • max time network
    36s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240730-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-08-2024 21:09

General

  • Target

    773bedb309767c5c171b87a4242b46eaf0ad98433cbef3a194764152f080fba3.xlsm

  • Size

    92KB

  • MD5

    2a18f7c379e63d427f5615eb57b01993

  • SHA1

    46d1b5abded5a42ed999b34d1ce58105d23010f9

  • SHA256

    773bedb309767c5c171b87a4242b46eaf0ad98433cbef3a194764152f080fba3

  • SHA512

    fac029b4039945da1591b00359497f9e9c5daaa6ade0cc806b3454f7a91c3cd0ddb30087ed21e4189e910e36fa36fdf74436e4595117f9467163aaac87e2310a

  • SSDEEP

    1536:CguZCa6S5khUIM2Od4znOSjhLM+vGa/M1NIpPkUlB7583fjncFYIIPFa:CgugapkhlMdaPjpM+d/Ms8ULavLc5

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\773bedb309767c5c171b87a4242b46eaf0ad98433cbef3a194764152f080fba3.xlsm"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:544

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/544-0-0x00007FFDEB890000-0x00007FFDEB8A0000-memory.dmp

    Filesize

    64KB

  • memory/544-2-0x00007FFDEB890000-0x00007FFDEB8A0000-memory.dmp

    Filesize

    64KB

  • memory/544-1-0x00007FFDEB890000-0x00007FFDEB8A0000-memory.dmp

    Filesize

    64KB

  • memory/544-3-0x00007FFDEB890000-0x00007FFDEB8A0000-memory.dmp

    Filesize

    64KB

  • memory/544-4-0x00007FFDEB890000-0x00007FFDEB8A0000-memory.dmp

    Filesize

    64KB

  • memory/544-5-0x00007FFE2B8AD000-0x00007FFE2B8AE000-memory.dmp

    Filesize

    4KB

  • memory/544-6-0x00007FFE2B810000-0x00007FFE2BA05000-memory.dmp

    Filesize

    2.0MB

  • memory/544-8-0x00007FFE2B810000-0x00007FFE2BA05000-memory.dmp

    Filesize

    2.0MB

  • memory/544-10-0x00007FFE2B810000-0x00007FFE2BA05000-memory.dmp

    Filesize

    2.0MB

  • memory/544-13-0x00007FFDE8F30000-0x00007FFDE8F40000-memory.dmp

    Filesize

    64KB

  • memory/544-12-0x00007FFE2B810000-0x00007FFE2BA05000-memory.dmp

    Filesize

    2.0MB

  • memory/544-11-0x00007FFE2B810000-0x00007FFE2BA05000-memory.dmp

    Filesize

    2.0MB

  • memory/544-14-0x00007FFE2B810000-0x00007FFE2BA05000-memory.dmp

    Filesize

    2.0MB

  • memory/544-15-0x00007FFDE8F30000-0x00007FFDE8F40000-memory.dmp

    Filesize

    64KB

  • memory/544-16-0x00007FFE2B810000-0x00007FFE2BA05000-memory.dmp

    Filesize

    2.0MB

  • memory/544-9-0x00007FFE2B810000-0x00007FFE2BA05000-memory.dmp

    Filesize

    2.0MB

  • memory/544-20-0x00007FFE2B810000-0x00007FFE2BA05000-memory.dmp

    Filesize

    2.0MB

  • memory/544-19-0x00007FFE2B810000-0x00007FFE2BA05000-memory.dmp

    Filesize

    2.0MB

  • memory/544-18-0x00007FFE2B810000-0x00007FFE2BA05000-memory.dmp

    Filesize

    2.0MB

  • memory/544-17-0x00007FFE2B810000-0x00007FFE2BA05000-memory.dmp

    Filesize

    2.0MB

  • memory/544-7-0x00007FFE2B810000-0x00007FFE2BA05000-memory.dmp

    Filesize

    2.0MB

  • memory/544-66-0x00007FFE2B810000-0x00007FFE2BA05000-memory.dmp

    Filesize

    2.0MB

  • memory/544-151-0x00007FFE2B810000-0x00007FFE2BA05000-memory.dmp

    Filesize

    2.0MB