Analysis
-
max time kernel
133s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
-
submitted
06/03/2025, 02:04
General
-
Target
$TEMP/Are.xltm
-
Size
69KB
-
MD5
2ca7882bce3d00fb5dc4b61a062fdef1
-
SHA1
0d423ee1d58fb3f15b87a7d990ea1dd75318f4ca
-
SHA256
1d04c20ac110bc216286aa754fa8e475905938f19b82fa8bc42c3473c1a7d17c
-
SHA512
1f9e4dfb053d793f0114eee1e09de8ea92a262d2cd31e21572e8ef3954bfe4138c2a07a9434e9bbb1b7af532718d4def21efb6f0d1c6a6e19f69a5cf381b2252
-
SSDEEP
1536:JkerCMbHxeu0awCgNa4Qr5+RtBhNvhmzBUxdBPFwSYfNfj4:nCyku1dgGrAb3No+vFwh1f8
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 9 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\$TEMP\Are.xltm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB