Analysis
-
max time kernel
133s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
-
submitted
06/03/2025, 02:04
General
-
Target
$TEMP/Opera.xltm
-
Size
18KB
-
MD5
f08fb2c77ea13dcc716f6c13b62eaed7
-
SHA1
51486cbe02019c5bdf2e557b7cf42309f5f50804
-
SHA256
f0d15066f9af7d87c80fc3e7408014d08ad8fb55e33ece47c956774b799d9f44
-
SHA512
57e50b3cea8ccaf1dc2d08b417cf6acd178d71d590ecbb4c6ab662464b1dd7d5f3e120837a3d069da732e861e68e2f3164138185872ef458b71c86d2edde79a3
-
SSDEEP
384:lPKGZN3M6vk2va/U4PQ09ko8GtVsVQL1J2YLBfLm45+zayQeTFCI68r:ly+8R2va/tZb9Rlz5a
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 9 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\$TEMP\Opera.xltm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB