Analysis

  • max time kernel
    47s
  • max time network
    34s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/08/2024, 22:07

General

  • Target

    1f6e55dc2e4caf84d3b74c0097e6852cb91f263424816e2d0aede9eee51bc28d.xlsm

  • Size

    92KB

  • MD5

    230c03a1400290ff1336bf8162bf1e4e

  • SHA1

    5fde7b07b29e090d6db0565c25b866df0bbdf350

  • SHA256

    1f6e55dc2e4caf84d3b74c0097e6852cb91f263424816e2d0aede9eee51bc28d

  • SHA512

    83bb901505ec5f28b0ea2482eb05be6dc0bd8d4c110df7f8c82919e74fb1fcb21dc98fb210acd0b6eaa2e90f2cd71ad692e3d7cb7dfcafa743d6863810033b47

  • SSDEEP

    1536:CguZCa6S5khUIoJqlYq95/G4znOSjhLM+vGa/M1NIpPkUlB7583fjncFYIITEFk:Cgugapkhlo4lV/GaPjpM+d/Ms8ULavLt

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\1f6e55dc2e4caf84d3b74c0097e6852cb91f263424816e2d0aede9eee51bc28d.xlsm"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:460

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/460-3-0x00007FF91D22D000-0x00007FF91D22E000-memory.dmp

          Filesize

          4KB

        • memory/460-2-0x00007FF8DD210000-0x00007FF8DD220000-memory.dmp

          Filesize

          64KB

        • memory/460-4-0x00007FF8DD210000-0x00007FF8DD220000-memory.dmp

          Filesize

          64KB

        • memory/460-1-0x00007FF8DD210000-0x00007FF8DD220000-memory.dmp

          Filesize

          64KB

        • memory/460-0-0x00007FF8DD210000-0x00007FF8DD220000-memory.dmp

          Filesize

          64KB

        • memory/460-7-0x00007FF8DD210000-0x00007FF8DD220000-memory.dmp

          Filesize

          64KB

        • memory/460-8-0x00007FF91D190000-0x00007FF91D385000-memory.dmp

          Filesize

          2.0MB

        • memory/460-9-0x00007FF91D190000-0x00007FF91D385000-memory.dmp

          Filesize

          2.0MB

        • memory/460-5-0x00007FF91D190000-0x00007FF91D385000-memory.dmp

          Filesize

          2.0MB

        • memory/460-6-0x00007FF91D190000-0x00007FF91D385000-memory.dmp

          Filesize

          2.0MB

        • memory/460-10-0x00007FF8DB160000-0x00007FF8DB170000-memory.dmp

          Filesize

          64KB

        • memory/460-12-0x00007FF91D190000-0x00007FF91D385000-memory.dmp

          Filesize

          2.0MB

        • memory/460-13-0x00007FF91D190000-0x00007FF91D385000-memory.dmp

          Filesize

          2.0MB

        • memory/460-11-0x00007FF91D190000-0x00007FF91D385000-memory.dmp

          Filesize

          2.0MB

        • memory/460-16-0x00007FF91D190000-0x00007FF91D385000-memory.dmp

          Filesize

          2.0MB

        • memory/460-15-0x00007FF91D190000-0x00007FF91D385000-memory.dmp

          Filesize

          2.0MB

        • memory/460-19-0x00007FF91D190000-0x00007FF91D385000-memory.dmp

          Filesize

          2.0MB

        • memory/460-18-0x00007FF91D190000-0x00007FF91D385000-memory.dmp

          Filesize

          2.0MB

        • memory/460-17-0x00007FF91D190000-0x00007FF91D385000-memory.dmp

          Filesize

          2.0MB

        • memory/460-14-0x00007FF8DB160000-0x00007FF8DB170000-memory.dmp

          Filesize

          64KB

        • memory/460-150-0x00007FF91D190000-0x00007FF91D385000-memory.dmp

          Filesize

          2.0MB