Analysis
-
max time kernel
133s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20/11/2024, 10:16
General
-
Target
fb7f6f73a5d63de59e09f179deecddff08577230671bb5005c8b1f37ca62a8de.xls
-
Size
101KB
-
MD5
fdf0eaeccf5aa3c7ba8548291966f7b0
-
SHA1
e06802697e5ab3fe477c98fa61d71af92d0fba03
-
SHA256
fb7f6f73a5d63de59e09f179deecddff08577230671bb5005c8b1f37ca62a8de
-
SHA512
c68d7a29539c9b84bd3040eb186055d60eb963e825db7b7c4077c951e28c835794c028a3a7110d443f7e082cb3996acff05858fc323448ca10ec35f0656846bf
-
SSDEEP
3072:RKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+/bOZzbqkn6RND9fxuss8Oa:RKpb8rGYrMPe3q7Q0XV5xtuE8vG8UM+7
Malware Config
Extracted
https://decorusfinancial.com/wp-content/7dODakeZZ83fJi/
https://e-kinerja.ntbprov.go.id/aset/sAeaEvaSxGhvnsuFE/
http://facts-jo.com/init/jLQY2FpesnIGi0qHqz/
http://fashionbyprincessmelodicaah.com/4185PINT/jwh2cwjFHLZL/
http://easiercommunications.com/wp-content/yqNxi8IKbRIt7akB/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\fb7f6f73a5d63de59e09f179deecddff08577230671bb5005c8b1f37ca62a8de.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
671B
MD500a2a988be0c1c334e72cf4defc2c054
SHA181977efe753c47a0151a6c34e8e50eda5bafa329
SHA25633c34d174fcabf4deec3e49ad726e281eadd73d1a660c616e68aa4f163928f15
SHA5126e1ec41438a2d64be3e23d7cd25c9b5020cd819bc02949ef51a927668be558538daa5c5a42593790b2075d6a0dc9706e19df3d745ee08060eba77f1b2762157d
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB