Analysis

  • max time kernel
    133s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-12-2024 20:40

General

  • Target

    eicar-standard-antivirus-test-files/eicar-excel-macro-msgbox.xlsm

  • Size

    11KB

  • MD5

    c9ff045b0e82e9d1a45a0bf4d3fa838d

  • SHA1

    3910119b4c228ccf36c999eec32179318305918c

  • SHA256

    488c1c2643973ba8e2464584482da7644347945cebad9bbad85b7ca41f432b6c

  • SHA512

    6841e86d74f94c2d2a93d84c96d4c7e2881588456e80ad69776246136a4962acc033c5870a90c384fb101bb86f623a0f2bc6e42a3e11c9ed2bd0d1d4a3c07b6d

  • SSDEEP

    192:HeoDZfNVx+6RUoBX50nay/ZOjQ9fwEQxizT3W7+p+1iTvp98Z29:Heo1HcoB6nayxOyQITMaTR9j9

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\eicar-standard-antivirus-test-files\eicar-excel-macro-msgbox.xlsm"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:4804

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\b8ab77100df80ab2.customDestinations-ms

    Filesize

    1KB

    MD5

    7f90791b5eabda2fbb2b16a896ba7c3e

    SHA1

    51351b3d8f3ca1238fdd3ec04d33a4f01d77445a

    SHA256

    7a35a69cdd3b92c5fe371a647e6bee575368a54fe5c312132269956dbd6cc341

    SHA512

    56ca3df92623ea38a0ad33bd81069efc013f4ecb3440af57c9bbc09d5e171572c2bf0ae59d06c6a65b7239ce518a10434fbe7d4595b10db23fd00fc4f45255c5

  • memory/4804-7-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-14-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-8-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-23-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-22-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-20-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-19-0x00007FFCA72F0000-0x00007FFCA7300000-memory.dmp

    Filesize

    64KB

  • memory/4804-17-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-16-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-15-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-13-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-12-0x00007FFCA72F0000-0x00007FFCA7300000-memory.dmp

    Filesize

    64KB

  • memory/4804-11-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-10-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-21-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-28-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-18-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-27-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-5-0x00007FFCA9C50000-0x00007FFCA9C60000-memory.dmp

    Filesize

    64KB

  • memory/4804-6-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-4-0x00007FFCA9C50000-0x00007FFCA9C60000-memory.dmp

    Filesize

    64KB

  • memory/4804-3-0x00007FFCA9C50000-0x00007FFCA9C60000-memory.dmp

    Filesize

    64KB

  • memory/4804-2-0x00007FFCA9C50000-0x00007FFCA9C60000-memory.dmp

    Filesize

    64KB

  • memory/4804-1-0x00007FFCA9C50000-0x00007FFCA9C60000-memory.dmp

    Filesize

    64KB

  • memory/4804-0-0x00007FFCE9C6D000-0x00007FFCE9C6E000-memory.dmp

    Filesize

    4KB

  • memory/4804-38-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-37-0x00007FFCE9C6D000-0x00007FFCE9C6E000-memory.dmp

    Filesize

    4KB

  • memory/4804-39-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-40-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-41-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB

  • memory/4804-9-0x00007FFCE9BD0000-0x00007FFCE9DC5000-memory.dmp

    Filesize

    2.0MB