Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
12/12/2024, 18:09
General
-
Target
վǰ־Ը/·.xls
-
Size
47KB
-
MD5
77d18f7049616f4fa266ea6cfc624109
-
SHA1
b95004f339c86a9be9d2f76cb15557a523f775f8
-
SHA256
a2455040b1969882962e3bc41aa33c63fe630a15e5374790c5fb58fe6338f404
-
SHA512
d281fa56dff15fdeb2f8caa91eaa0228c82f6c4def9093c1a951fe7392e0070cdb2b8382dbee89f44638986262c759c9216070c0eb1e95fc00f57325e9cef500
-
SSDEEP
768:1JJJJK2eD6ltTMJFy2fuV/rGTGVVuR2bZ95lPNTiVgwhF9q/OtTXR:1JJJJK2eD6ltTMJFHfuV/rGTGVV7Z95m
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\վǰ־Ը\·.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB