Analysis

  • max time kernel
    145s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31-12-2024 19:54

General

  • Target

    Nowy folder/apt/ieee-data/oui.csv

  • Size

    28B

  • MD5

    14fbb69d87e79c4677670febd1df04d4

  • SHA1

    de6aa84cd002db707949ef690244ea781ebc2040

  • SHA256

    134cf20dd9c248c4c8de4e926961a7ad884865510401371d2549cb74e71922cd

  • SHA512

    0ffaf9dd719688883c3ada6ee67fef7d10656bdee79c669178e0bc344635d9600c0775f54ff646575db60beee79d65ef333771237921128fa61761496c3bef76

Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 14 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\Nowy folder\apt\ieee-data\oui.csv"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:1600

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\b8ab77100df80ab2.customDestinations-ms

    Filesize

    662B

    MD5

    777f8cb3e23d1e6f1a253703cd6c69e4

    SHA1

    2e8da14eb8722f707fb08f5804e9cb939c53156d

    SHA256

    175738a3d8b70403dcfe0dfddc4bd755919f497dbdb8d3fe24245ca7da129b8c

    SHA512

    63cab3a7c445debb830e7f69b1d0cb217bfc374021f18d86e535ce03282f03fc80daf7827a18cf5d8421696b0b62550db932ff39aa592026f05bafb8399948f5

  • memory/1600-14-0x00007FFC7FC10000-0x00007FFC7FE05000-memory.dmp

    Filesize

    2.0MB

  • memory/1600-31-0x00007FFC7FCAD000-0x00007FFC7FCAE000-memory.dmp

    Filesize

    4KB

  • memory/1600-5-0x00007FFC7FC10000-0x00007FFC7FE05000-memory.dmp

    Filesize

    2.0MB

  • memory/1600-2-0x00007FFC3FC90000-0x00007FFC3FCA0000-memory.dmp

    Filesize

    64KB

  • memory/1600-4-0x00007FFC7FC10000-0x00007FFC7FE05000-memory.dmp

    Filesize

    2.0MB

  • memory/1600-6-0x00007FFC3FC90000-0x00007FFC3FCA0000-memory.dmp

    Filesize

    64KB

  • memory/1600-7-0x00007FFC3FC90000-0x00007FFC3FCA0000-memory.dmp

    Filesize

    64KB

  • memory/1600-8-0x00007FFC7FC10000-0x00007FFC7FE05000-memory.dmp

    Filesize

    2.0MB

  • memory/1600-9-0x00007FFC7FC10000-0x00007FFC7FE05000-memory.dmp

    Filesize

    2.0MB

  • memory/1600-13-0x00007FFC7FC10000-0x00007FFC7FE05000-memory.dmp

    Filesize

    2.0MB

  • memory/1600-1-0x00007FFC7FCAD000-0x00007FFC7FCAE000-memory.dmp

    Filesize

    4KB

  • memory/1600-3-0x00007FFC3FC90000-0x00007FFC3FCA0000-memory.dmp

    Filesize

    64KB

  • memory/1600-10-0x00007FFC7FC10000-0x00007FFC7FE05000-memory.dmp

    Filesize

    2.0MB

  • memory/1600-11-0x00007FFC3D8E0000-0x00007FFC3D8F0000-memory.dmp

    Filesize

    64KB

  • memory/1600-15-0x00007FFC7FC10000-0x00007FFC7FE05000-memory.dmp

    Filesize

    2.0MB

  • memory/1600-16-0x00007FFC7FC10000-0x00007FFC7FE05000-memory.dmp

    Filesize

    2.0MB

  • memory/1600-17-0x00007FFC7FC10000-0x00007FFC7FE05000-memory.dmp

    Filesize

    2.0MB

  • memory/1600-19-0x00007FFC7FC10000-0x00007FFC7FE05000-memory.dmp

    Filesize

    2.0MB

  • memory/1600-20-0x00007FFC7FC10000-0x00007FFC7FE05000-memory.dmp

    Filesize

    2.0MB

  • memory/1600-18-0x00007FFC3D8E0000-0x00007FFC3D8F0000-memory.dmp

    Filesize

    64KB

  • memory/1600-30-0x00007FFC7FC10000-0x00007FFC7FE05000-memory.dmp

    Filesize

    2.0MB

  • memory/1600-0-0x00007FFC3FC90000-0x00007FFC3FCA0000-memory.dmp

    Filesize

    64KB

  • memory/1600-32-0x00007FFC7FC10000-0x00007FFC7FE05000-memory.dmp

    Filesize

    2.0MB

  • memory/1600-12-0x00007FFC7FC10000-0x00007FFC7FE05000-memory.dmp

    Filesize

    2.0MB