Analysis
-
max time kernel
133s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
04-12-2024 20:40
General
-
Target
eicar-standard-antivirus-test-files/eicar-excel-macro-cmd-echo.xlsm
-
Size
12KB
-
MD5
b68e4ac3052c859be74f8399e515d60b
-
SHA1
1426492d6f23c621c63d1dbacdf684800429337f
-
SHA256
652cd62572a10f768639f554cf21f39327a2aefc970d5d53dba05b89505a0c90
-
SHA512
c895b79e1646da45fad3de0f7909e063639a513aed195efcea78703ce140a223164582397017e5db482fa5b7b9217c0860c662523e190dc85327394866b5e205
-
SSDEEP
192:HeoDZz+4XuGPcrPjJqSXJa+TDgraQxizT3W7+p+1iTv1QXwXQ:HeozLmjJqEJaGQITMaTaAg
Malware Config
Signatures
-
Process spawned unexpected child process 1 IoCs
This typically indicates the parent process was compromised via an exploit or macro.
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\eicar-standard-antivirus-test-files\eicar-excel-macro-cmd-echo.xlsm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SYSTEM32\cmd.execmd.exe /K echo X5O!P%@AP[4\PZX54(P^^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*2⤵
- Process spawned unexpected child process
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54c72d01d00b33cb62c72560aabef31a1
SHA1c049cfbb63d7b0c70b7f81f13616cc89399fdea8
SHA256483fde916384e8a3ecdba83aa4ea39593023dfcde033a7beb5a63c2113aa42db
SHA5120b957395c7b20658c49cd9990a8ed75461fba63462d5a3f18e10b2afa677a60c640f50e2a3114c278ae7b09f87b94f40b56908799d3f1aeb3b71537ffe492a6f
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB