Analysis
-
max time kernel
47s -
max time network
37s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
-
submitted
07/03/2025, 21:48
General
-
Target
5dd1c825d9bce0058f2253a10669354127e8a0c3ef92a929a3cf0d4ee3c7447a.xls
-
Size
205KB
-
MD5
b8b248031632f87a80cb616f30d9e6cd
-
SHA1
426c32f75fb64b42fbd1e76571298003f522819d
-
SHA256
5dd1c825d9bce0058f2253a10669354127e8a0c3ef92a929a3cf0d4ee3c7447a
-
SHA512
7e5eb3192a5904c12101ff1bd47de02170ac7810de6760f6cbae9aaafcbabb28293241fe430b9baa477f98c981c03fdeb1289a2b1e02aef1bb627ac369d4976c
-
SSDEEP
6144:j9k3hOdsylKlgryzc4bNhZF+E+EgwKYAdP+AK9oEU:jpK
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\5dd1c825d9bce0058f2253a10669354127e8a0c3ef92a929a3cf0d4ee3c7447a.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5a950fcfb38c4bd2aed2ab8de725d0c4f
SHA193b21283abc042f7b21a78a4551e98a96bff73a3
SHA2565474b6db2ec8267733054de176aa0096e5d4a6e656dc9d8766c810528ac8b5c1
SHA5122ef190c0e1542bcec78f27719b42579fd0f5bb0b3c538c1e8ed3619266b018ba7185e3cf2c2b5a1b6b34cb217596f3e184a6116f418b7792d5d034dcb9915be4
-
Filesize
327B
MD574e9572d473d074b8eed799a1640a9c7
SHA10feac475393e994f5a6620a23f0be5ceadf12773
SHA256baf54544d36fd8730bd92740d86685138ea8e66d54c94154097d65531e168928
SHA512606262c065d328bfbe2c625d141ddbe2d984c62e3bf3d105ea4ba4238604b891a7fb2eac0e61ec0d5e8f05bc7e9f5ed8637611c45af39d9ac49481568852691a
-
Filesize
2KB
MD56dcf981927213841e9221e2521793fd2
SHA1aff815e3330e97c25036a66ce13f8d48d3eead05
SHA2566b27b90ed02a7c86691e9a38579a84cd3766f68dcc00d7115ddc31f33437120d
SHA512102079822a26a065a708b7cacc350f3bcbc6b444c889173f19e265740eb223f0f0d5fd04e93f200a8a8099d50a94b4daf1be6c7f7da04d0ba2e516866b18bc06
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB