Analysis
-
max time kernel
133s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20/11/2024, 13:50
General
-
Target
feeecc836f8e551c67599ae3841d7a1b72fcea0fdf3a0a7048de72579117b3fd.xlsm
-
Size
73KB
-
MD5
be6b71fa02e4066ab6a0bc715ae4ac7a
-
SHA1
f56fbd236c80fd54618a32bd6adc9d20310e6a9f
-
SHA256
feeecc836f8e551c67599ae3841d7a1b72fcea0fdf3a0a7048de72579117b3fd
-
SHA512
50551bc1082e0c4d8a30e62a2bad5b777fe1f2a1114c404db196c248ffe2df7d24f4dd71003d03e90c4c0522f33bd0c2146d92550c32f6d77395b32991f3140f
-
SSDEEP
1536:z1piXSto0NSVUINwtzLT7OMuuAe0yOcfpXZGsMlV9A:z1piCtzSmICpH7OZuvZGsMm
Malware Config
Extracted
https://ayadaonline.com/catalog/z98Igwj/
http://thelockerroom05.com/css/xLxxwxW/
http://ayelet.binamix.com/wp-admin/EQbETdq/
http://hamato.myartsonline.com/v8/l77Eu5t8J9S89cM/
http://vodafone-lte.net/oBtnAMiZWd/HKRRttJEoZ/
https://apc.as/blogs/I3k1ewWViesCQMf/
https://aplys.cz/udm/bBOvDBh7kRS11KC/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\feeecc836f8e551c67599ae3841d7a1b72fcea0fdf3a0a7048de72579117b3fd.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5feb670442c792af66f27c003e9e02c3c
SHA1817c0c9aa91c4960f03632905cb8d081805f05df
SHA256e22cd152d42f73785c2842cf43d896febe0076873d119b2781623b4aa0144056
SHA5128a09cdea06d847dceea0040dcf01b1a90eaabd726616002efe056eba4a30ff4adfa0ce9c624e1aaf53a1cc960b2389b41d6e00dc1f235edee821bf4ae970e407
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
4KB