Overview

overview

8

Static

static

8

城区质�...�).doc

windows7-x64

4

城区质�...�).doc

windows10-2004-x64

1

城区质�...�.xlsx

windows7-x64

1

城区质�...�.xlsx

windows10-2004-x64

1

城区质�...�.docx

windows7-x64

4

城区质�...�.docx

windows10-2004-x64

1

城区质�...��.xls

windows7-x64

1

城区质�...��.xls

windows10-2004-x64

1

城区质�...��.doc

windows7-x64

4

城区质�...��.doc

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a242990a82e13cc8e9e62f61a7acdb4709d70a50d20a3244124d5174b6adcd4a

  • Size

    7.2MB

  • Sample

    221125-x6k3zsaa82

  • MD5

    77c6af3004eda29ef4dfb55d26967957

  • SHA1

    a10899dc8c8efccb71cd10a13db3156edec2b27c

  • SHA256

    a242990a82e13cc8e9e62f61a7acdb4709d70a50d20a3244124d5174b6adcd4a

  • SHA512

    c45cdedc4084e587e62476dac740e40349859e88a475ccac6ecebbc2d6b4fe556e3308ce09ee3cd8814692edd5c897d78eb864017f86ca08ff60f0b7e7b3914e

  • SSDEEP

    196608:z01oSZay37W16r+OEEYe5lOwK8GPWH/cUwxE:goSO6yeKwGPzxE

Score
8/10
macroxlm

Malware Config

Targets

    • Target

      城区质量技术监督局E-ZLW/城区质量技术监督局E-ZLW(室分设计方案会审记录表).doc

    • Size

      47KB

    • MD5

      401ae33421c712024b98e4466dd6faca

    • SHA1

      afb7cd8ad91d5f0cb75d8d85f58ed7d3e0257f80

    • SHA256

      d8c29b8042ee21e18bf5d201b9588ec77d6aa20bed3b2bca4c9e6238e4326da3

    • SHA512

      beea5e79eb0ee17ed08452cd1ac86daf8803ff34f93b9c7b86d06e6d5bd6a2976ece9502201af2f85a61844a9ab09d8c700ccec4d6c85db70ac875535595b103

    • SSDEEP

      384:57X01peA5a1bwmTjG0ja2XNu7X/m8Ra5UyGcSxwAjLcgabHZbHhbTH/:5j01peA5aumhUO81fU19v

    Score
    4/10
    behavioral1behavioral2

    • Target

      城区质量技术监督局E-ZLW/城区质量技术监督局E-ZLW材料清单.xlsx

    • Size

      21KB

    • MD5

      f69209557413e6965447c0f15e70ecd8

    • SHA1

      d195258d5ae92bc7859ca70ac28126621be6c5d5

    • SHA256

      6137e2572fe675037ff040803418a00e12e647a2c0df25023978df75c03b57b9

    • SHA512

      9818b499e4c5ff74988ca74051e2846e62d3c57814d6c7bf43f9594b9dd48ab5688a8d345cafd760fc3cfb7c964dd2ec143c50f37ee2ea952bb5f9535abb6916

    • SSDEEP

      384:jyzTYdPOn8a9pnO10dTaRobu20FfNTEZ3Ts5HqqsChC66dtdpHFc:jyzTgOnhO6Ta7JVAZ3WHu166TnHFc

    Score
    1/10
    behavioral3behavioral4

    • Target

      城区质量技术监督局E-ZLW/城区质量技术监督局E-ZLW覆盖情况说明.docx

    • Size

      232KB

    • MD5

      7d831426aaca5161c22d231116a49f2d

    • SHA1

      bcbdff24b451dede7789b2ef177312812c23d26d

    • SHA256

      3f4c03463f052b166161f5ce7bedf9afb6246fa8f7d02d3388d2e5057b99c5d2

    • SHA512

      01876350fcd453d0778faa010c588e009f85e09009797904b687b1445237b76910f3542016e5f70df61e3cecc394ed163649125692de253b5c532e97ac446c20

    • SSDEEP

      6144:ClRnStEd66XY1PtrltYS0zSpk+RMR2yMOsS3bvud:Wn56UYpthtY/zSpeR2qDbGd

    Score
    4/10
    behavioral5behavioral6

    • Target

      城区质量技术监督局E-ZLW/城区质量技术监督局E-ZLW预算.xls

    • Size

      260KB

    • MD5

      4452090a8641738b7c9db7673b8f5053

    • SHA1

      980170d745c6b3e16dbb8e83761815af20109ab3

    • SHA256

      e98fcb546dc181b50bbe823500bc7ee87cbb637a7f0a8b5221436b526eed8f56

    • SHA512

      3844b7ac727e8150b1555509a8ab93354dc5944a780754efaf75554ce6f7fe30dc171b67661b5945d0aa57f035957222fc488781d1985e158d6a2631ff8c15d5

    • SSDEEP

      6144:dxba7iFAbSyLYAiaFLorhddKLC/9Krd8cRs2:V

    Score
    1/10
    behavioral7behavioral8

    • Target

      城区质量技术监督局E-ZLW/城区质量技术监督局E-ZLW（选址交传输）.doc

    • Size

      50KB

    • MD5

      acd134bb3e1a39a9f4942398aec45250

    • SHA1

      2c545acc809bc5448f4a9cf77fb3615107f8a2d0

    • SHA256

      7cf8bc8560bdfcf9fa0462e273878ee1c6531a3a89813ddf1791f51d2434ffa0

    • SHA512

      ac451356e288ce9776135afa4615718fd76a73d770149a255b4c468417d0a78601b22cf90715b16b11e9c632a9f85fe28aecd7f2fe227fa3296db5c9d0eda111

    • SSDEEP

      768:7fNF3QNUyEI/KCouO35ePk+rsUeOt7CoQX/ofuQDTzm+S33kwJ8rYzI8ucE3lFFL:7f4GkChaK

    Score
    4/10
    behavioral10behavioral9

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

5
T1112

Credential Access

Discovery

Query Registry

9
T1012

System Information Discovery

9
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks