Analysis
-
max time kernel
134s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20/11/2024, 14:31
General
-
Target
График_отпусков_Мосэнерго_2025.xls
-
Size
79KB
-
MD5
5dce01016542a73419b482fd3db3c280
-
SHA1
8739b1560d4d94b83dd0ed3fe249b9c87c3e0fee
-
SHA256
5a481888faa2bc395cfaee96b6f0d8dcbcbe9c82ede6939f99e85abdb6a07df1
-
SHA512
778db441fbdf940e212d2ed35fdd599b853bfc64abb9cb49a041cbdfc9d077e81c76373dd1b737d972b746df23b6af74043e173cdbfebe899cbb662f8e700783
-
SSDEEP
1536:SlAmLnDYeV2Pq962olzkdFBw0+/xTcmXl3GuI:S5LnDYeVtg7zkd2Bc+l3Gr
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\График_отпусков_Мосэнерго_2025.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB