Analysis
-
max time kernel
133s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20-11-2024 21:07
General
-
Target
a817072ebab6a953cb110c015a08dc07cd82a9cf4a6c90a16cf2bae307677388.xlsm
-
Size
122KB
-
MD5
ee46821b545644533bfb09b32246e29e
-
SHA1
680bf87bc905c57a83932fa03bdbc7bfbd69a20e
-
SHA256
a817072ebab6a953cb110c015a08dc07cd82a9cf4a6c90a16cf2bae307677388
-
SHA512
09feff97e4cda13beea9cde59d004dba979b20ba5254b82e3d0252bdc1d2e16bc3fc7cedf0d755e7775587ae2f2830ae90fb8753ac7c0a5c2064c042319341b6
-
SSDEEP
3072:NDUVIc/arWmzgyYTnYNelISKXhsVskl4OjkQ:BAzSTgyYz5p6cQQ
Malware Config
Extracted
https://mkt.digitalhouse.com/pablo/2Ua1v3E8rB/
https://s-armsestonia.com/wp-content/7JKeYnm4TKIO1XvXK/
https://oneworldlantern.com/9A033MS/
https://ruiver.nl/fotoalbum/R6oydzYl2ezPTUSKas5/
https://rvdempreendimentos.cloudstorage.pw/cgi-bin/SBVe/
https://andrewpharma.com/wp-includes/KKXAiWGL/
https://wxoperate.bb2play.com/framework/1zTlT1/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\a817072ebab6a953cb110c015a08dc07cd82a9cf4a6c90a16cf2bae307677388.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5afcbc59a382af632c5d61eb00b07258d
SHA1a9dc531d25c24ea7d4d3ed5a4b2c063941d5c997
SHA25616253af9a539c780896b9691350e92f9b4c08087e1a1ccf38d59971a4ac1cca5
SHA512aac5789be9417e0bf51aa566e16b8a8459de3234736465e71ebb6f54af7f24425f91de48df64352b54bffa4dde57cca7bb4099fd30812e0db55cae44df68e338
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB