Analysis
-
max time kernel
108s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20250410-en -
resource tags
-
submitted
20/04/2025, 13:32
General
-
Target
$TEMP/Dominant.xlm
-
Size
56KB
-
MD5
87135b6922c649e2328731b6046d9c4a
-
SHA1
5f37be4e42989e2ac15f975d9895f480db74e980
-
SHA256
d1a3db8200606104b56806a1c943c9ab3646cb64c9fc948e79c211ed1678bcf6
-
SHA512
31fc00f01de3459dc043b0ae19c2d02fe06e5e5881a1cfef360cf8038d2e5b4c9fef49340a2f53a03fe798f6fcd44b3cf73e4a9ebf228fe8e5f647346cbe478f
-
SSDEEP
1536:6SBzKQxfebGNGhv2agB5lIrOcW/Z4h6bMvkoD4:3WQxGSNGaB5aKcKZC6by3E
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 13 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\$TEMP\Dominant.xlm"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD585b21aed51989ffc7db3cc643df0c142
SHA1948786f68886eeaef8be840106624caef0212d56
SHA25698603ed978d92c2f78478b39db6acb38f469bc225cf6bb1c99ff15a209dfd283
SHA512216c839c81200f9cfb4cc2ab6b70caf91816f1de260b2d33a519f48074a1af72b2e742187737de7a0832b43f9fd82b0c508bb098be54b261482cc47a38eefef4
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB