Analysis

  • max time network
    590s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-11-2022 14:03

Errors

Reason
Reading agent response: Timeout while submitting payload

General

  • Target

    邱山、渠道、三株设计图纸(修编版)/三珠中桥/路线路基路面/5 路侧护栏设置表.xls

  • Size

    50KB

  • MD5

    60324636888b8347403ee7cab2522ebf

  • SHA1

    eea5a5a8c269b3dafe79f84d7b98865bbb58bd69

  • SHA256

    f47c8d58227e2b4a1e4f70a70132a000e6842a3ea8f47a469e30540f6dbc59a3

  • SHA512

    7ab24e89b704fe0cf503482d70619fe70466b3c271f45b861f64527d2244e39274f5ddb0e68f4fb7f9cedc74a616f22486c0b920e0e28e96c3b8acbc34df94da

  • SSDEEP

    1536:aHHHHDC6LHyHbHPrB6Ic0NtydB2WHNlU7Hoqs1Z95Zioz:acoz

Score
7/10

Malware Config

Signatures

  • Unexpected DNS network traffic destination 2 IoCs

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads