Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-11-2024 22:55
General
-
Target
d3ce89aa447c1f6d31cef45dc2c5353bf8644cfa1408875ac5fc848a7ab8b46b.xls
-
Size
78KB
-
MD5
bbf8d3c358e41ec1b0f973768f3c8fe4
-
SHA1
8f4121981181124e177f767025bce45bd98fbc2d
-
SHA256
d3ce89aa447c1f6d31cef45dc2c5353bf8644cfa1408875ac5fc848a7ab8b46b
-
SHA512
d126578b760020a231cf05e0b14d946295a82132e55f708181954eb82b3c650e32a12fb8e597a5bab8edeb20cad0ab2609d72e7589855420c22342be214ab167
-
SSDEEP
1536:ZwKpb8rGYrMPe3q7Q0XV5xtezEsi8/dg+dXTZhKEw+PmYEJ8zobcW13G+8eJNfnN:CKpb8rGYrMPe3q7Q0XV5xtezEsi8/dgf
Malware Config
Extracted
https://hostal-alfonso12.com/clases/SKtPvv/
http://howesitgoing.com/images/HyaDnlbl6K7tbh2Lugys/
https://www.jdserralheria.com.br/cgi-bin/KFG6/
http://inteirado.com.br/fonts/7dJCVvuE5x3YrGQs2oJz/
http://iciee.untirta.ac.id/test/GccRw/
https://ideoso.com.tw/cgi-bin/zLrnBd2Eg1N3UVy5yL/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\d3ce89aa447c1f6d31cef45dc2c5353bf8644cfa1408875ac5fc848a7ab8b46b.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5850b74a542d1233172a41a047c3712a2
SHA10a0796c184cbeb7fd35d29028cc3fe266cf3cce3
SHA256e40439c38774979714541cdd2a5222a9ed23b96f4f82d24a7cd7a86c7f482568
SHA512759dcfe20a54437d2337bc00fceb7d5e2c911989704be9e1e2be8374e0b71be923ddf06aa3315edb766f40f7520387d44b7b44a233e335618ada77b954c07536
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB