Analysis
-
max time kernel
133s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20/11/2024, 03:01
General
-
Target
1dbafe5388d832f4822a1595204e3dd99f1925677dd5ebdd6c3e9ee5d598affe.xlsm
-
Size
40KB
-
MD5
1552b39b6a820f4e90f1ad44ae4dd0f0
-
SHA1
73942f6bb94bb6722ca70f492fc2a415a8683946
-
SHA256
1dbafe5388d832f4822a1595204e3dd99f1925677dd5ebdd6c3e9ee5d598affe
-
SHA512
4e00aaa27bb6734725410365d066ed05e6026d0cdae9f8e738636dcc8a09073445791143e396e7d99cde75c959733e1008f16f8b4d4c530d2c0a812f9537fb8c
-
SSDEEP
768:Tomihd8DOevZCwt79yKfcrND59V+L9Rw4eWrXcTqZ0VfEw/5:Tom8eDNylND59V4jwmXc2CVfEA
Malware Config
Extracted
http://updatesgarmin.com/c/X5oK7bz/
https://drsniffles.com/OldBackup/2gc7uoHraTd/
https://leblogducbd.com/wp-includes/h5WdaXow/
https://ipekozmel.net/wp-content/hiwPw9KvUFV2jKZc/
https://yassinezeroual.com/imsi-hilo/DufS8rvZ/
https://anjumaneshiateali.org/e5qty/Cngg0NcOM/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\1dbafe5388d832f4822a1595204e3dd99f1925677dd5ebdd6c3e9ee5d598affe.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5174052252d5b5831f92aa9994ca90e80
SHA10fb3fbec9042b6ce344d33196ff0bd60b962bb8e
SHA256080b640d27ed35b4f39e0cf7046f183364b1b2b4936f1fb73fcedb5b17c3767b
SHA512ab2a364823da12259b4e4d5a9a4ad99b0f75aca77c6583b74eef733b2e211006122dbbfd7d4db3b5e800afdbaf4c2123f069cf3fa1c2fb220bb0dab1e15b2157
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB