Analysis
-
max time kernel
186s -
max time network
190s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
25-11-2022 19:22
General
-
Target
博物馆/92园林费用表.xls
-
Size
18KB
-
MD5
64c9f4ca4c70dd16adde4388c4c48e90
-
SHA1
0964fc33a455941517876ede8516d96689ee58ce
-
SHA256
4258d8d2b18499c8c037815731217bc9f6e27dfe9cb2002bd5447ffbf0fb1382
-
SHA512
cbd4a51fb2f0a5051e1cd41379d6553b4ac9e8000f662dd5b1b18171b55e6c481cbd899b74f8244e64ac4bbb773b8850b448b9da44a956206016ec58c00bd690
-
SSDEEP
96:yblgCiplplpl/Vbh2VR2GUPcdyg6+f22NQwXcmN74d2b8h6CMglejkpinItGrMx8:yPiplplpl/Fh+R20Qws59645
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\博物馆\92园林费用表.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB