Analysis
-
max time kernel
47s -
max time network
52s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
-
submitted
07/03/2025, 21:49
General
-
Target
5dd1c825d9bce0058f2253a10669354127e8a0c3ef92a929a3cf0d4ee3c7447a.xls
-
Size
205KB
-
MD5
b8b248031632f87a80cb616f30d9e6cd
-
SHA1
426c32f75fb64b42fbd1e76571298003f522819d
-
SHA256
5dd1c825d9bce0058f2253a10669354127e8a0c3ef92a929a3cf0d4ee3c7447a
-
SHA512
7e5eb3192a5904c12101ff1bd47de02170ac7810de6760f6cbae9aaafcbabb28293241fe430b9baa477f98c981c03fdeb1289a2b1e02aef1bb627ac369d4976c
-
SSDEEP
6144:j9k3hOdsylKlgryzc4bNhZF+E+EgwKYAdP+AK9oEU:jpK
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\5dd1c825d9bce0058f2253a10669354127e8a0c3ef92a929a3cf0d4ee3c7447a.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5a950fcfb38c4bd2aed2ab8de725d0c4f
SHA193b21283abc042f7b21a78a4551e98a96bff73a3
SHA2565474b6db2ec8267733054de176aa0096e5d4a6e656dc9d8766c810528ac8b5c1
SHA5122ef190c0e1542bcec78f27719b42579fd0f5bb0b3c538c1e8ed3619266b018ba7185e3cf2c2b5a1b6b34cb217596f3e184a6116f418b7792d5d034dcb9915be4
-
Filesize
327B
MD574e9572d473d074b8eed799a1640a9c7
SHA10feac475393e994f5a6620a23f0be5ceadf12773
SHA256baf54544d36fd8730bd92740d86685138ea8e66d54c94154097d65531e168928
SHA512606262c065d328bfbe2c625d141ddbe2d984c62e3bf3d105ea4ba4238604b891a7fb2eac0e61ec0d5e8f05bc7e9f5ed8637611c45af39d9ac49481568852691a
-
Filesize
2KB
MD5e640981c52bb5a70f41cc743fb515d56
SHA1161ec0788c8cfe62943b36b9878b24bbc3a1ed5f
SHA25603f90cf6f3d6563bd2e6df509cd4bb7cdd90d19a46d653b58d48ead006120ce4
SHA512f53106e30a0e320a4d47ce1b2ad0371be5b0da4489f8840c451bcc2d283c635ca44d0057dea62f6ab9f14003c9ff723c779aeacbdd7d2a9e1476ed057ad95e0d
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB