Analysis
-
max time kernel
94s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-en -
resource tags
-
submitted
02/08/2024, 05:51
General
-
Target
Electrical Boards Panels BoQ.xlsx
-
Size
35KB
-
MD5
555ed2ea533e0196d0e91005a951aa09
-
SHA1
e13b34f907df358d304be28fc0ce094e4bbda7db
-
SHA256
8bfaad49dd772f6426a923122a900ed70d46d9a850a81234799ce044b8967923
-
SHA512
5a970bee6d643a237f27dbcf03289aef274c2aaba8e3cd72c593993296cdf6fb7e8a74b29ab4c8c33f5c7cc494a208d9bc116a68ea4e9283dcb8e424f1269550
-
SSDEEP
768:t3eeobQOWWTpsgMHx3If4CSxH+mwXFuax:t3TobQTWtsgMRY4omi5
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Electrical Boards Panels BoQ.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
682B
MD582695ad9bd55c9dcc99821687ce9e9c6
SHA169bc750d40b63b8d0b4fa245257c29c75f3a3674
SHA256fc31fa9391d116fefd461ababff8690213ebe585b2fd569f84ea983102923eff
SHA512e69541c123aee00db62b1c599e5eaf3947aaaf5061d8706d49df64867647c5c348bf756d88a813adb2a120173b336a34737adef8e4e6b8d380dfa491ed4e049b
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB