Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20/11/2024, 13:00
General
-
Target
58dc0ceba7d8b2165aa8552d498b7a2aaa5141e5b21c39c257a749f357d3f3b4.xls
-
Size
70KB
-
MD5
ce9e70742917124e36de1d61ef82c19e
-
SHA1
665f983e7fcfcb928eba971325e79ed9b6da5ae3
-
SHA256
58dc0ceba7d8b2165aa8552d498b7a2aaa5141e5b21c39c257a749f357d3f3b4
-
SHA512
e34e35be7459760492d145c1bd023752e5d28993747b1cc5c343ec0dd15e8014e33706de3d8713f291cbc3f207fc59781d23e3743f005b524e4b1a3f9829b6bf
-
SSDEEP
1536:tOKpb8rGYrMPe3q7Q0XV5xtezE8vG8UM+1YW/ESKQHS1yXJFa5etiv:AKpb8rGYrMPe3q7Q0XV5xtezE8vG8UMJ
Malware Config
Extracted
http://congtycamvinh.com/plugins/jG3iqpQaTL1TXYMolH/
http://ecube.com.mx/e2oCWBnC/6wp2K4sfQmVIRy6ZvdiH/
http://dulichdichvu.net/libraries/6vhzwoZoNDSMtSC/
http://gnif.org/administrator/G68HwUGlKNJNU2vh5cz/
https://edoraseguros.com.br/cgi-bin/l7ZERv5deNsfzlZUZ/
https://sanoma.allrent.nl/cgi-bin/KXbI5OhLJ/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\58dc0ceba7d8b2165aa8552d498b7a2aaa5141e5b21c39c257a749f357d3f3b4.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5e99855fe9243e505be64fa7026342f83
SHA1d48279255c3b346de3bc499d6163417a2728fdd3
SHA256a20b79941795fc09444abc996dabad0ccac53aa34204cb2bd5fa365a10814059
SHA512b62af1e090a3fb95e3119c34ee97849e82cb4d38d8779bdc64b102c22c1fd8abfa1d1683e278224be0deca6ec7aabba45df987cdb4672e148fd3875a02cafe41
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
4KB