Analysis
-
max time kernel
140s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
25/11/2022, 18:28
General
-
Target
邛崃市固驿片区底商（正街133#附1#、建设街101#、金竹街）/内线/邛崃市固驿�.xls
-
Size
17KB
-
MD5
92514364c43a743160be6f109fff83ee
-
SHA1
d1e7810134fcf97ccab02055075158d2bcdf5be3
-
SHA256
540bd12287d1917243564d06b1fa457435856c992c50ebab0eff749dbe1b66d9
-
SHA512
c56efc13b8eb1fad1f0229545796dedc481956ab838d887f40c22aa5485cd6e9f42d0ee53789fea442ab8f0f482f51769fe6872231a868b7496698c0e3363d5b
-
SSDEEP
384:deeesCIJFz+kLei81Xv8cQtVfX/beyXSwtvT2GHt53AQ8trr33m0JJ7b80mmTqik:deeesCIJFz+kLei81Xv8cQtVfX/beyXy
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\邛崃市固驿片区底商（正街133#附1#、建设街101#、金竹街）\内线\邛崃市固驿�.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB