Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
28/03/2025, 12:32
General
-
Target
Info Enviada DIAN Acta de Visita 08112023/10. Ingresos y Retenciones.xlsx
-
Size
12KB
-
MD5
513ba491964771ebd15fd6b79ba93b2e
-
SHA1
4d738e891c001329876eaf860e969f7d4bff732b
-
SHA256
818d5c84453e2b62fda14ac69678b91d286909a971fce475d11cf217533dad9a
-
SHA512
f1a27ba8b1c62c2c088aed666894f19e3f3ad6d8dc61eae4ba72ae218287b7093a7388a05b0be2b00802465866c417612aa422f6119e5990d05111d8b948218c
-
SSDEEP
192:LtuQxwbfr/cJym7sh3psCYAMtuxCO9sCw8Kit4Oc82KmQshX65KFy82Q:bxwjIJymAhZ9kzsw8Jpc82/f2Q
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Enumerates system info in registry 2 TTPs 1 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE"C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE" /dde "C:\Users\Admin\AppData\Local\Temp\Info Enviada DIAN Acta de Visita 08112023\10. Ingresos y Retenciones.xlsx"1⤵
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
44KB
-
Filesize
44KB