Analysis
-
max time kernel
34s -
max time network
35s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
-
submitted
12/03/2025, 21:54
General
-
Target
0f40e4843e5a016db820a43af49afe1ade6969a9a6f1e2f0a7a87c876f012605.xls
-
Size
349KB
-
MD5
80d3a2606e71b42adb3e597c1f5ec342
-
SHA1
9921532833999e93226149c455acea083d41bcef
-
SHA256
0f40e4843e5a016db820a43af49afe1ade6969a9a6f1e2f0a7a87c876f012605
-
SHA512
edfb792f6c23db954f453d27ce58aed6b2b409357734d6014e3ff065128df06accbe6e098bdafb97427f284c2818dd8ad2477d925d93a7646153418517a17ed8
-
SSDEEP
6144:WxEtjPOtioVjZUGGnwfDlavx+/xoY4GPOJ4LNm3pRFd+20vS2e2AZPhFZtlSbXo:1pTdNt2f83u4
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 9 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\0f40e4843e5a016db820a43af49afe1ade6969a9a6f1e2f0a7a87c876f012605.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB