Analysis
-
max time kernel
133s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-11-2024 18:53
General
-
Target
8071ab6dc729259c152f1fed96770557fb2ff18ebbea3bf03f3c56ea4de1509e.xlsm
-
Size
49KB
-
MD5
b9569680d0b856450f8b135b6e35cfa4
-
SHA1
18175e8784bcbd34a9ef05067b3b7010760f405c
-
SHA256
8071ab6dc729259c152f1fed96770557fb2ff18ebbea3bf03f3c56ea4de1509e
-
SHA512
3c2359b204d8e5ede8d0c505f77b3e018d9682354ec95b9a39a93a663fd59a0d76589f144d89d6a194c5b701ed1307eb8a2487ecbd1d24c6c160fdf0bbeb2580
-
SSDEEP
1536:IAcEOt24xZdRBzH9hJBrdEwwNXekVIe260:xcEc2Kd3zdtdEwoB2t
Malware Config
Extracted
https://alinatourbg.com/mail/TBCGVNzLeENXb/
http://alinac.ca/images/Lp6yKpIpRf6/
http://www.alsancaklimanemlak.com/system/T8nE1jfQ7W/
http://amakpost.com/assets/c8AT1uoCVLSxez/
http://alsanjari.co.uk/alsanjari.com/CynW/
http://alicehui.com/pics/fETgjDyPfUBQp/
http://amasides.my.id/cgi-bin/uFqdwCqAP7mro/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\8071ab6dc729259c152f1fed96770557fb2ff18ebbea3bf03f3c56ea4de1509e.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD524b00c57284ab7c2e18ea4a375ca6825
SHA1c9eaddd45beb53c1acd08a0970acd16f30e5f994
SHA2561d902650b8fa35592e5a3915779c28db7a141b82891b52a91e9a3477073e7c4f
SHA5125f624b0c8de9fee8a645f445f98826b8194e4c420e8c43ede6eb21e684780fa2236236beb176c64a709d26df1c45742f3a8440fd298fe6c5d10d314601de2cd6
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB