Analysis
-
max time kernel
133s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20/11/2024, 10:27
General
-
Target
0e91bfa9da6b2d270d397d82738128932003c7012861856b8492ce68b8b7890a.xlsm
-
Size
173KB
-
MD5
ab3005c36433dfe20236d5972fc7881a
-
SHA1
3d290f7ec771a274031df315d68236ca14040edd
-
SHA256
0e91bfa9da6b2d270d397d82738128932003c7012861856b8492ce68b8b7890a
-
SHA512
50d119ae3f0123832602600e9d6a94f08d64abdb64df6c744a224b230c5fc41d769cd78f0fc5ffefa6112ac5964e60e40dc76ccf01cba3265ad222fc06411061
-
SSDEEP
3072:XUlKwtyfsBMtuqBqBqrhyqBqBqBqrhyqmBqenFZRmXANKXg7e79ElHIcp4Gg7SpB:X+KwtyfsBMtuqBqBqrhyqBqBqBqrhyqU
Malware Config
Extracted
https://carretilha.net/whats/RSL50BlRP0a6hj/
https://shrinandrajoverseas.com/old/wQXty0wnVDY/
https://zionimoveis.com.br/wp-content/Bn00gaw/
https://kontacsgo.pl/m/uwZYNUjGeWW/
http://vps36153.publiccloud.com.br/wp-admin/RfAZZ776uMNhSpOT/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\0e91bfa9da6b2d270d397d82738128932003c7012861856b8492ce68b8b7890a.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5fa576b8ea56c2f442981d2051fd58326
SHA14555ef4fbd57c27c51a544c4540473a8dd75d4e5
SHA256bd2ce135419b0b21b3fb22658b857b548050fa32cca33618fd587a005fb8092e
SHA51299aa28504d54b6bd13c6f50d19cde0f9ca17704a70b4b4f2a1f7d4eab6561f66585fbfde94c79cd3465d551cf5d8db470beee6cad93b9ffe31d1adf2903dc840
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB