Analysis

  • max time kernel
    313s
  • max time network
    372s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-11-2022 19:24

General

  • Target

    维修一三组10月运转设备报表.xls

  • Size

    119KB

  • MD5

    bc975b54fc42712a23b86c4f9cb072a3

  • SHA1

    d19a838a3569ed2831248c2045b6d6f3b340442b

  • SHA256

    e6a7b74210342e244a5a0d692e49d205fded4f2d75357785ad971a31767923d0

  • SHA512

    4729ac1dac2a3547ed664fc5fa27dc3880f20285fcfae8a6fde6594c6302cabc119a869538bc1db904cc11c80085151af742ed6e0640a6d2241a32009bbffc47

  • SSDEEP

    1536:UG666clXwWXbAI7cvwQq/B5ZJChyRfMZ95e+ejRBSWVbrzNKQsz7ITkR62lD5EeU:lx+NWVbrzcz7ITk9fEdJtXwY5kHGNv5

Score
1/10

Malware Config

Signatures

Processes

  • C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\维修一三组10月运转设备报表.xls"
    1⤵
      PID:4092

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4092-132-0x00007FFEFC670000-0x00007FFEFC680000-memory.dmp
      Filesize

      64KB

    • memory/4092-133-0x00007FFEFC670000-0x00007FFEFC680000-memory.dmp
      Filesize

      64KB

    • memory/4092-134-0x00007FFEFC670000-0x00007FFEFC680000-memory.dmp
      Filesize

      64KB

    • memory/4092-135-0x00007FFEFC670000-0x00007FFEFC680000-memory.dmp
      Filesize

      64KB

    • memory/4092-136-0x00007FFEFC670000-0x00007FFEFC680000-memory.dmp
      Filesize

      64KB

    • memory/4092-137-0x00007FFEFA340000-0x00007FFEFA350000-memory.dmp
      Filesize

      64KB