Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-11-2024 18:00
General
-
Target
e296f11d96c8d415916e214a099f4229218ca9ab409b2716d9e47fe6eade42c6.xlsm
-
Size
173KB
-
MD5
4c3699baa1ddb95602d4b04680edd08b
-
SHA1
06651cd2023b4e10a5ab592dfd3da149fbc00e41
-
SHA256
e296f11d96c8d415916e214a099f4229218ca9ab409b2716d9e47fe6eade42c6
-
SHA512
7822c7776dd3897c261474d6f6a2b71d6cfcd91206eb47017f23fe44594dccb51c3c7cca7ff680537f61d82aa4ee9a6211e8fb1f540370fb4a902123e7304f20
-
SSDEEP
3072:3UlKwtyfsBMtuqBqBqrhyqBqBqBqrhyqmBqenFZRmXANKXg7e79ElHIcp4Gg7SpB:3+KwtyfsBMtuqBqBqrhyqBqBqBqrhyqU
Malware Config
Extracted
https://carretilha.net/whats/RSL50BlRP0a6hj/
https://shrinandrajoverseas.com/old/wQXty0wnVDY/
https://zionimoveis.com.br/wp-content/Bn00gaw/
https://kontacsgo.pl/m/uwZYNUjGeWW/
http://vps36153.publiccloud.com.br/wp-admin/RfAZZ776uMNhSpOT/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\e296f11d96c8d415916e214a099f4229218ca9ab409b2716d9e47fe6eade42c6.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
665B
MD5f2031c8936a1e10e8b3e6ab09b20de40
SHA1ff5af4c4f90889db40939e91149713123af31822
SHA256a86c573e339dca73cadd1965c35e84231cddd964fe5286ec399a14f532c519ca
SHA512b2c55daf81284c6c28cf1484ac76915134c4b3e76857961c2726086f71c3dfc1d5d99eb00958c3fc5d068f171936b1914058429c7f0beeea433c7da9eb4d042f
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB