Analysis
-
max time kernel
133s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-11-2024 00:31
General
-
Target
4d253b70fa67c068cf47159628cc5637b4be6fa75d73b0b78650d72d8124482b.xlsm
-
Size
40KB
-
MD5
a70a7f213a5e9c951a60ff18c9a6a2cd
-
SHA1
27783d05b98db9689374e278a77121721a093908
-
SHA256
4d253b70fa67c068cf47159628cc5637b4be6fa75d73b0b78650d72d8124482b
-
SHA512
6f0c628227939c5f9a4eb8d3aeabb561fcf58c34f1df11e548936cc6768c5e34420762d50d9c200c04f3b9f2f6f44c5386cdec43f7f8e20fe1fee18414147428
-
SSDEEP
768:jomihd8DOevZCwt79yKfcrND59V+L9Rw4eWrXcTqZ0VfEw/5:jom8eDNylND59V4jwmXc2CVfEA
Malware Config
Extracted
http://updatesgarmin.com/c/X5oK7bz/
https://drsniffles.com/OldBackup/2gc7uoHraTd/
https://leblogducbd.com/wp-includes/h5WdaXow/
https://ipekozmel.net/wp-content/hiwPw9KvUFV2jKZc/
https://yassinezeroual.com/imsi-hilo/DufS8rvZ/
https://anjumaneshiateali.org/e5qty/Cngg0NcOM/
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\4d253b70fa67c068cf47159628cc5637b4be6fa75d73b0b78650d72d8124482b.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5d5f1be39fad4d32873a7c48ad90e6a62
SHA1b4c4030ead87745d5aa0722e3abe8fc56f150fd9
SHA2568e79b9fdc67a2052910817837610866877a56cb35cad5c04d87657d636a365ae
SHA5123b7ab81b52554c3033b74ff67b8b65fddb3dc73682709f43b48e2c7512b77a7cacf2d04bc381e49b658fac23c889b8a5f73ae9453160eb48322535871b885a7b
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB