Analysis
-
max time kernel
142s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
20/03/2025, 21:23
General
-
Target
TailTeller2̌(1.0.0)/www/excelData/Database.xlsx
-
Size
154KB
-
MD5
9107cabb4cd242673531521d52299b65
-
SHA1
7da5b78fb19d920aa9f405b41d1bc0c7d2909a4b
-
SHA256
02d161b84979220f2cf96272dd2ef17f408407d8d3bd0904af354190ec15acf8
-
SHA512
725d4399fcf842b74a29228670668434e8b29a442bf5e2e0be6dde422199f7200ac49828b906bfbbd1d16642b02a1caefd3859d09cc38aad176124387a5cc08a
-
SSDEEP
3072:4V7DyJr43CJtcQQB4W0tq8YtNLLLLLLu6666666xtgxwM2tXYV:40JrOCJtcQQq9YsotXYV
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\TailTeller2̌(1.0.0)\www\excelData\Database.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5KB
MD51a51ce60a1fd5ec6531938f3079be271
SHA14511b2fd744e0b2673ab6201fdb54089d30c16b1
SHA2563389606465428678bbc32367274888dc7fd47321e33a9b1d90e32016fceb936f
SHA5126472527ade8e1e4037c8a8aad83dd4274f29f1a772bc916263332b271ac547b7efcd30c4e58711a4998e37073ae2648465227ead5e8e8c342ea2968f12995702
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB