Analysis
-
max time kernel
152s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 18:47
General
-
Target
春天公馆2期/春天公馆2期光路由信息表.xls
-
Size
20KB
-
MD5
033e74372622d9039ba1927f2b59e59f
-
SHA1
72eb53c651e0a96df67771cb0bd375db59074ad5
-
SHA256
d5e3bb90be9e3d822c614a467cf308c58b474a7f48c63d9f50d5b8e11b3cec2a
-
SHA512
43006f209d215779e453a0f62d9ffcb3638812598267cd9122de7ed96ce0108927d4c0b99af6a88c452b1ffd573eccdbe49739599c0c83858451892ea29a565b
-
SSDEEP
384:ow000pSSQ2WTPH2th0NuGnTNcpS0PvT2ParN8AHbKdXAKhqbp4/+O9BKWX4/B1mg:ow000pSSQ2WTPH2th0NuGnTNcpS0PvT7
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\春天公馆2期\春天公馆2期光路由信息表.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB