Analysis
-
max time kernel
133s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-11-2024 23:48
General
-
Target
96bcbad1a5d99366275b7e8087303990356d2ec0c1796f9e83b1220804347902.xlsm
-
Size
37KB
-
MD5
c1e5285a86c5cc4a5a5a44e5b35aedb1
-
SHA1
8e04d936a6b99701ff4187110865d874b691ecd6
-
SHA256
96bcbad1a5d99366275b7e8087303990356d2ec0c1796f9e83b1220804347902
-
SHA512
f11d0ceed630f21007b8eb6c204d7ebc220baa7ea46ca53481de81b894f894241a81dfcda1e54f0a5da99f66aa89031ba3456e54b620c90c80525c5544425c93
-
SSDEEP
768:27CkFF/vxL7UD9msu3bm9Y9Z502lkJexn9/Eg00wPYRND/0ZSPo0B5HAVJ:27Tlxwuaa502Wex9wTsZ/0YBdI
Malware Config
Extracted
http://sorathlions.com/tmp/bfJrKD4g0bJL73qw/
http://www.invest-moon.com/wp-admin/2PbOcXXyFr4oFoogAA/
http://narsanatanaokulu.com/wp-includes/reZNtZ53IH/
https://ramijabali.com/licenses/WQu8ZS0qQNGp/
http://support.techopesolutions.com/gq2z3/yt7TquOtSLXXeade/
http://blog.centerking.top/wp-includes/YvwIBPBq/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\96bcbad1a5d99366275b7e8087303990356d2ec0c1796f9e83b1220804347902.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD575c8bef6c55fa68bec69cdd9a67dd35f
SHA17fe8a446fbccdddd31c6e9164149c6b72ff3262f
SHA256f987a974f754c75311329160f691ec2230cfec759fce7e12cd7b47cfbba2b545
SHA512b727ca1dbea2b7d266a81f4044fd5a832f1e4e2fa3a1f6809c0b7b8620a76b65e5a8f906af38ede32f97ae99cea77c4d312e2b990c671e8ca28ce1d3070b3e6c
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB