Overview

overview

8

Static

static

8

编审说明1.doc

windows7-x64

4

编审说明1.doc

windows10-2004-x64

1

西环岛�...��.xls

windows7-x64

1

西环岛�...��.xls

windows10-2004-x64

1

西环岛�...20.xls

windows7-x64

1

西环岛�...20.xls

windows10-2004-x64

1

西环岛�...20.xls

windows7-x64

1

西环岛�...20.xls

windows10-2004-x64

1

西环岛�...��.doc

windows7-x64

4

西环岛�...��.doc

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f6b79312aa7ebed677038e8bc5858542866b504b3e1977a4f70548e5b674b154

  • Size

    70KB

  • Sample

    221125-w1nfgshg4w

  • MD5

    15def99d7da609ac1b34c986a9aa7195

  • SHA1

    2a2bf4ab7bb2cf2d5662733ddc8a913bfceb8829

  • SHA256

    f6b79312aa7ebed677038e8bc5858542866b504b3e1977a4f70548e5b674b154

  • SHA512

    2cb02ba6727feb04b64bfb737402c443cff751e4ef5e30f4a48da0878aa602dfd2634e27c46ada9f98b02f860591b5dc292d471600350345ef33970968b46483

  • SSDEEP

    1536:7vY7PhPSzVw7cDz1m+dOyjM7mdWyYQmsSN/YK+:7qPMzKefzvwNNwK+

Score
8/10
macroxlm

Malware Config

Targets

    • Target

      编审说明1.doc

    • Size

      22KB

    • MD5

      96a4a07a8aba874980ce317056083a0c

    • SHA1

      c227b5890cf9960d925885ae478e25c57f16eaad

    • SHA256

      9048d855f0694a216daf7d50887ab15790cf8a14d1805dd4bfb6e02f41d35b98

    • SHA512

      416e976ca0a147d403531fe746a18e952a2506457491d4926801bfbfb5a28181d9c70a7654ed834f8a0767d3057a6314ba178d61c401466b12c8c4c58a3c5a6f

    • SSDEEP

      96:iEbbWbbbbdyR6bCbbbb2bbGbbbaCMI1FV28+lUl0fbBsgGKcDqw1groVst9xpm5+:FfxV20ufugvG/gesC59p

    Score
    4/10
    behavioral1behavioral2

    • Target

      西环岛“绿道”工程二标段1.20/二标段汇总表.xls

    • Size

      23KB

    • MD5

      7149658da4a19df31fd487c96be1427c

    • SHA1

      240efc1d7a67d0be87efd7e3a21780140bd4610b

    • SHA256

      2b57edf4523fcaeee77ff5336de27adf8eaae5dc66f4e611c9a3946c4aa2be6e

    • SHA512

      6fd97e3b4311f79bac4a10c11776c4f4e83ad5734e228a2f00b2e865c7f96f7ba815fb04b9ec3fb97fc812f85ba30e48882e259df3889c61bfd71f535d7032de

    • SSDEEP

      384:qFeeeeLzqnjW9zR21gloV2dSdSVTfHQSEF/X3XIVuVTc:qFeeeeLzqnjW9zR21giV24dAfHQSEnIJ

    Score
    1/10
    behavioral3behavioral4

    • Target

      西环岛“绿道”工程二标段1.20/西环岛“绿道”工程二标段1.20.xls

    • Size

      214KB

    • MD5

      80d7ddad9162a2a55a323a427312f071

    • SHA1

      e260337c7bc89375d0c532b62be60fede2105eb7

    • SHA256

      a67663868a67b8db970e64840f7e7c6a242bbd31f7475448b790838a8e8d8c03

    • SHA512

      02e2d17a7485c4520ffc21e24a0d4f6940da7ac0c5331f710516d17f5b5e70423ff0f240dbe9b0f1444dfdf464e0880ded4bf3767938285524669f394a4ca153

    • SSDEEP

      3072:ebFmhfSY+szULzguz7nvJxnt+iS4BD17V4wGw05mCvF7EWXu:buz7nxdXl2Jti

    Score
    1/10
    behavioral5behavioral6

    • Target

      西环岛“绿道”工程二标段1.20/西环岛“绿道”工程二标段（试验段）1.20.xls

    • Size

      33KB

    • MD5

      f6c10381014ea50f4883bee4233d917f

    • SHA1

      c20eebc05fd32138eafb859d9ae6cd1148d53bd0

    • SHA256

      00b2532ecdc9f8c1a3e792390c5570d441e1c7047655635c4cad417e31b93ceb

    • SHA512

      0017785f33dd2a2ca4674bf1596a0e44583a1cb1973719309cd1b7a879b125fda4185afa103c89793b0bdbcb92b8e6f00216b113dc15d0815151ea15a5cbe5ea

    • SSDEEP

      384:+ggggdpR2XCLb57uyg0bmxvGLuMtZ7rpO0il:+ggggdpR2XCLb57rbm9GLuaZ7rY3l

    Score
    1/10
    behavioral7behavioral8

    • Target

      西环岛“绿道”工程二标段1.20/西环岛绿道工程编制说明.doc

    • Size

      22KB

    • MD5

      796eeced4f1132f6e1fe29c4d9329313

    • SHA1

      458917af6570a39d6a2485ff45f96d49b427d2d0

    • SHA256

      b504e71af37603a1b081b52d2a128fceb1529c9af7cc599d3491639016f01e3c

    • SHA512

      77b54603d86ca2736354aabce50943bb220e0fa948f598e6b5364bc730ff8d6b3a1e708ddcc56dddc0470945cef84f80e3324c9478cf8ce631949b79d6f8ca96

    • SSDEEP

      96:wIccco8q0Js2sTHJ2/pUuF8QKIqELl6utGToR9RMrlKffVg0X7qxCYrwbaVIz:wKt2hUNIqEB6utGTtgZ5q

    Score
    4/10
    behavioral10behavioral9

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

5
T1112

Credential Access

Discovery

Query Registry

10
T1012

System Information Discovery

10
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks