Analysis
-
max time kernel
133s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20/11/2024, 05:28
General
-
Target
9062ef76376c68d96fbf721f6794bd0a26215b7732aafc58d2c227743af1b624.xlsm
-
Size
46KB
-
MD5
5cf314021aef4499cc7d832d1d5ce41c
-
SHA1
200af694d44a4fea5d4ea398b3e93b249e6c8e92
-
SHA256
9062ef76376c68d96fbf721f6794bd0a26215b7732aafc58d2c227743af1b624
-
SHA512
3e9053c244538294a3e226bcdbbaa6fd0e0165386d8ecde8732c0c8d73a448938dee57fdd3056e7fc40f726e0f4d40c95e60a1d384bd6cc2d2f9a8cc83c6f0cc
-
SSDEEP
768:Oio9DOevZCwrvtD608zdDTKufT9nz0LTyY1NiMZFYpvrLeci3cr+Uh0VPWft:Oio9D7UtT5fTR4Lh1NisFYBc3cr+UqVC
Malware Config
Extracted
http://diacrestgroup.com/ggv3rjy/9/
https://merturku.com/blogs/IFcif/
https://tugbagoncaguzellik.com/odwxblu/hRhyIiTr7M8/
https://winnieswondersaviary.com/wp-content/GfGvSMj6HihGNZZa9T/
https://mayatherm.com/vendor/3Vk/
https://dbmtechnologies.ca/wp-content/oZE7jRqRoPg7zVVW9/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\9062ef76376c68d96fbf721f6794bd0a26215b7732aafc58d2c227743af1b624.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD567a8d6dc1113ac056161723ec39518e7
SHA143b46180b008418338da719da3591402ac057b41
SHA25600461df15ffaee3350c3376695d9c65ce9b05655cc9396d3249d1055a6d661c1
SHA51214921ef7f67fd4dc69832eabbc2e0b53f666a316bb0e75867dd3d8220904bf446406bee513feaf57ed7c036608f5d9cbf941e3ee1a48823309b9762b87e8f6ac
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB