Analysis
-
max time kernel
133s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-11-2024 16:17
General
-
Target
0c68ff6cf8533c1a2ca09c5ea25e8a052011b94f65d70e24997c87d6c1aafaa9.xlsm
-
Size
40KB
-
MD5
cb76f5fdc7b3dea102d1fe6c4071ca8e
-
SHA1
d1509e3987e8e0643e587f10f3b36f99097fec42
-
SHA256
0c68ff6cf8533c1a2ca09c5ea25e8a052011b94f65d70e24997c87d6c1aafaa9
-
SHA512
c8529947855b4d5a3553c38dfafd0ae9b905b4453ca9fde207ba899fd498f5522bc599fcf8dc5b0ab533f6ffbff6e20956198c1ff791b381f2ab36f01a636f1d
-
SSDEEP
768:WXomZDOevZCwtvyKfcrND59V+L9Rw4eWrXcTqZ0VPH+t:SomZDzylND59V4jwmXc2CVPu
Malware Config
Extracted
http://radiomedenine.com/kidfngb/h3a3D5WRS/
https://mobapkapps.com/wp-includes/JcEqRwhEw0/
https://bhandariclub.com/iwdfol/X64nJKK8fsiQcbkW5MN/
https://welcomelanguages.com/factoo/7Wz9qXX7QSjXm0VPM/
https://deine-bewerbung.com/wp-content/HHotdOzCFlW/
https://wewin21.com/wp-content/NITdYcwbO3C1uJd/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\0c68ff6cf8533c1a2ca09c5ea25e8a052011b94f65d70e24997c87d6c1aafaa9.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD51f31fd6a66d5eaca818631dddb560ad4
SHA185741b76ea28de9fe59aecbc44263d24fec547c6
SHA256f5750025627cc2cab7dd87b27f6120ef028b07cb75e2e69cfad96fe605c8f1d1
SHA512a08d696feeb457212ae3511afcf89671b3f6b851fa635b7494b392dec20340c11a7441adaf8273348bcb5c8edeeec43e3791ce00ffd6c4cb692d100447df1c67
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB