Analysis
-
max time kernel
133s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20/11/2024, 10:06
General
-
Target
403ea0ffa49801f12ab33712b259a5e83a983ec8a720488d367ad249102fc55a.xlsm
-
Size
102KB
-
MD5
2586650097e10f4eb1c4c7c98ac865eb
-
SHA1
d080b2f74d7c5f1f2e715cd7d91bb5151f745e0d
-
SHA256
403ea0ffa49801f12ab33712b259a5e83a983ec8a720488d367ad249102fc55a
-
SHA512
30713a82cfa219767601a0ba72fbac7f90587616b1e96c067154521f3ca03f034007ce5a593938d590e08aa3764cc11764e76cf2033a5266cd980dbf7db2738d
-
SSDEEP
3072:HhR9cVA3Mqu8hahYIfiQOVOveshVf4KwJQikmGo6:HhRG+MrbtO8eOaDPk1o6
Malware Config
Extracted
http://www.numberscare.com/apocholic/0zs1GFW8z/
https://kratomcoupons.com/wp-snapshots/rRAWKjQIH4Jlc/
http://www.campingforacuresl.com/newdir/yKGYdIxMOqdNzaxeA7G/
https://coffee.devtechnosys.info/app/8UP4CHdtji/
https://dautuchungkhoanquocte.com/wp-admin/X0vaYKzvcqLdmO/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\403ea0ffa49801f12ab33712b259a5e83a983ec8a720488d367ad249102fc55a.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5d08962139985c72ced9f135480ca873d
SHA12c071553f9154d3e123c6f492c79858cb96f65cb
SHA25687e577926f85e056a755ddcc22a1fd69fc0561217179fb8b7062abacdba262a9
SHA51252a080232f494214290f79b06fd983ce354de4346586654fad4a3b58d5483a388f978ef655ee5a76c924949e70b4aa3f82e14650c767bbbac990b149448d5e90
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
64KB