Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-11-2024 18:27
General
-
Target
78a2997bbe71067fd7a7c55bc9c8ef40e49f1288157367bb43f2cea4c9a99c47.xlsm
-
Size
102KB
-
MD5
d7a910055e62cfd40384c8dac0aeb338
-
SHA1
4caf5ee894e0532a2149ff1faff905fe3c8c633e
-
SHA256
78a2997bbe71067fd7a7c55bc9c8ef40e49f1288157367bb43f2cea4c9a99c47
-
SHA512
1c0b17e119ee76c9236c8db1813d6ebcc573d47a71af38069c08e3187c27df6b15f0fa9116a736ff162b8fbe889baaab7ac14c5fac5b7a8583444473adc9ab30
-
SSDEEP
3072:bhR9cVA3Mqu8hahYIfiQOVOveshVf4KwJQikmGo6:bhRG+MrbtO8eOaDPk1o6
Malware Config
Extracted
http://www.numberscare.com/apocholic/0zs1GFW8z/
https://kratomcoupons.com/wp-snapshots/rRAWKjQIH4Jlc/
http://www.campingforacuresl.com/newdir/yKGYdIxMOqdNzaxeA7G/
https://coffee.devtechnosys.info/app/8UP4CHdtji/
https://dautuchungkhoanquocte.com/wp-admin/X0vaYKzvcqLdmO/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\78a2997bbe71067fd7a7c55bc9c8ef40e49f1288157367bb43f2cea4c9a99c47.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5c00aaf37fe0fc2252aacd8b1bfa79656
SHA1a20b6618dba11da9d34be6eacc27924ca6305577
SHA256326b741daa61033c9ef93be06e32674b32a6859e03d1285bf17051f422f47a0c
SHA5121a12ff0cd6231c9b1819b2e3636c17c2353529f8fc47fa73797a60575128b076c01feb6c31d597c797ce8378f1c10efd5b91d05f012f621d786efc917472faf4
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB