Analysis

  • max time kernel
    346s
  • max time network
    432s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-11-2022 19:23

General

  • Target

    VDA6.3 2010过程审核(更新)/VDA6.3 打分表2010.xls

  • Size

    120KB

  • MD5

    27750d122ac14faaa344fc4c98cc04fd

  • SHA1

    4b4e1fd17241b92560d16fd2b70513d8e738016d

  • SHA256

    b3cb6d4948944634169cb51b12116399fefb26d5be117e1e927bff2f8dda2cfc

  • SHA512

    9e2f9a3e98886ab55d125669b523250e1f24e458c539c42e39a897a2ba415b36af448c0b9205953407d012828ca61bf009329c13aa18d48feaee5849c59e9dd1

  • SSDEEP

    3072:9Ul6Nc7yRzs1H75wkZUV2tMKyWmrAETW7+wuG80q9NVlYq9+dOMjN7hoU0wmKs8:Cl6Nc7yRzs1H75wkZUV2tMKyWmrAETWw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\VDA6.3 2010过程审核(更新)\VDA6.3 打分表2010.xls"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:4400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4400-132-0x00007FFA76C10000-0x00007FFA76C20000-memory.dmp
    Filesize

    64KB

  • memory/4400-133-0x00007FFA76C10000-0x00007FFA76C20000-memory.dmp
    Filesize

    64KB

  • memory/4400-134-0x00007FFA76C10000-0x00007FFA76C20000-memory.dmp
    Filesize

    64KB

  • memory/4400-135-0x00007FFA76C10000-0x00007FFA76C20000-memory.dmp
    Filesize

    64KB

  • memory/4400-136-0x00007FFA76C10000-0x00007FFA76C20000-memory.dmp
    Filesize

    64KB

  • memory/4400-137-0x00007FFA74B60000-0x00007FFA74B70000-memory.dmp
    Filesize

    64KB

  • memory/4400-138-0x00007FFA74B60000-0x00007FFA74B70000-memory.dmp
    Filesize

    64KB