Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
-
submitted
05/03/2025, 13:05
General
-
Target
$TEMP/Platforms.xltm
-
Size
56KB
-
MD5
73181df9d7db2e27d805a39a176f58db
-
SHA1
6b411c77393b3e2b36e457bfaef2595471eb4210
-
SHA256
cc9bc4db96f8b2fc3f0058492d583b8ddae6d213bd0e4007d0660a678d6e7b45
-
SHA512
1d5d17c3b5b269282dd2d2d2dc0fb440cd7531f700ebd6560596d1c47e2751eb18e8593dca64928c94d7f2a48129c11143b030258d00a16a1441f84374b58fbe
-
SSDEEP
1536:vI2QZgCkPiTbHlrsjUMrYt2miP7G13axiVhAHkPz/:vCgxiTjlAtrkjqG/ACz/
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 9 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\$TEMP\Platforms.xltm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB