Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
11/09/2024, 22:02
General
-
Target
5c1f256d59ebf2d0f1f2a9081f1eeae0763a46ddc259f2274c2372aa742361fa.xls
-
Size
177KB
-
MD5
ac4e55c06767f51c6bd648ea1a326362
-
SHA1
0748047cea911ccf6e10da2180ae5cd2ecc6766b
-
SHA256
5c1f256d59ebf2d0f1f2a9081f1eeae0763a46ddc259f2274c2372aa742361fa
-
SHA512
eb95912a87735fc484e6afd9c5e064ffb059b95ee522ea9a3c4f766dcd5f007121d98b4e479ebc80f8fe79e91a687b8e3b7828e05be889625218df040cb5ec83
-
SSDEEP
3072:7Hk3hbdlylKsgqopeJBWhZFGkE+cWax9Gznj7x1Tu+vM/E9u7EgRcVQBTaducMc0:Dk3hbdlylKsgqopeJBWhZFVE+/ax9OTu
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Office loads VBA resources, possible macro or embedded object present
-
Enumerates system info in registry 2 TTPs 1 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde C:\Users\Admin\AppData\Local\Temp\5c1f256d59ebf2d0f1f2a9081f1eeae0763a46ddc259f2274c2372aa742361fa.xls1⤵
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
44KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
44KB