Analysis
-
max time kernel
133s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-11-2024 17:17
General
-
Target
4623c817a83e3ee1154f8f749fe1b20a6a0a341025bbe92b61ce522d12af3ed9.xlsm
-
Size
37KB
-
MD5
e2f547b6e38f9981dafa99e6fa74ed54
-
SHA1
9128f563f488abcf8439c42825d42d699d2fb2ba
-
SHA256
4623c817a83e3ee1154f8f749fe1b20a6a0a341025bbe92b61ce522d12af3ed9
-
SHA512
7606da123bc4f42d9eab21ee956fe06cb53d036a2df59813d993f78fcd3afa0a71378edbb2d53f5062df52c6e03beaa63692aa87bfcf8f3cc8fa1e7955f4af59
-
SSDEEP
768:m7CkFF/vxL7UD9msu3bm9Y9Z502lkJexn9/Eg00wPYRND/0ZSPo0B5HAVJ:m7Tlxwuaa502Wex9wTsZ/0YBdI
Malware Config
Extracted
http://sorathlions.com/tmp/bfJrKD4g0bJL73qw/
http://www.invest-moon.com/wp-admin/2PbOcXXyFr4oFoogAA/
http://narsanatanaokulu.com/wp-includes/reZNtZ53IH/
https://ramijabali.com/licenses/WQu8ZS0qQNGp/
http://support.techopesolutions.com/gq2z3/yt7TquOtSLXXeade/
http://blog.centerking.top/wp-includes/YvwIBPBq/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\4623c817a83e3ee1154f8f749fe1b20a6a0a341025bbe92b61ce522d12af3ed9.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ca0b2cac22912cf51299a7115c7e9335
SHA1940ecf6d7a43c4fe2b09c5b1d4e555783118bd25
SHA256e87a6e6b26e24c8cde6b4bc428c6a9c0175cb0b3318d961417eb46c745df5c17
SHA5128ee445b6aded9f3e5c5aed888805bfd5cc6afb29d5e7254fbef522d052229a755cf235af2a65d43a6c858656012b9caaa410fa0a831e7310d6443313836aabc9
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB