Analysis
-
max time kernel
34s -
max time network
37s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-11-2024 21:07
General
-
Target
241b198d22c1ddff730ef8acab9e595b1fc0e5fb7801b09d9dbbb81ce875121a.xls
-
Size
88KB
-
MD5
6929e695a4a04b82e1cd89121d75e93b
-
SHA1
ca5639691f1501da0d50fd4cf7c0d82e5e3b51e6
-
SHA256
241b198d22c1ddff730ef8acab9e595b1fc0e5fb7801b09d9dbbb81ce875121a
-
SHA512
dbcfa9b52c1fd634ace7dc23fe8a34fe41080ac8cd67a98c544bd8a7998808a0ac9f6106a367c1cceeff858063c14b863423d1a34dcf84cb57e2f13587f4829c
-
SSDEEP
1536:Fyehv7q2Pjx45uoDGTj+5xtekEvi8/dgL8EsAeE9jbDXQAzkWvgrPE4nWHPNc2AF:Fyehv7q2Pjx45uoDGTj+5xtekEvi8/db
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\241b198d22c1ddff730ef8acab9e595b1fc0e5fb7801b09d9dbbb81ce875121a.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB