Analysis
-
max time kernel
156s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
25/11/2022, 18:28
General
-
Target
邛崃市固驿片区底商（正街133#附1#、建设街101#、金竹街）/内线/邛崃市固驿�.xlsx
-
Size
10KB
-
MD5
84c0aa5d39e344dabe36e22ee4b50ceb
-
SHA1
73b568c8bf88469ee034f615faeb0dc82d2148cf
-
SHA256
9ff28a365c05fa56b5172d32d3f961eef619f404f7c69b5562bf13aebb02deb2
-
SHA512
41eab3b86d15da36cba09578d277d2c04c840dd801f9e0b8f3290d6bc948cdbb2c977e7e2a6ab8e843e10743ea7952fdb05a496296b54ac2a433a06da4564521
-
SSDEEP
192:Sfgt9l23DjaD89cHx8TxpF3YqqCL5xAEO35Or6vLvIZqX:Szjn+HxyptYy/J+7qqX
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\邛崃市固驿片区底商（正街133#附1#、建设街101#、金竹街）\内线\邛崃市固驿�.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB