Overview

overview

1

Static

static

2013年全...��.xls

windows7-x64

1

2013年全...��.xls

windows10-2004-x64

1

2013年全...��.xls

windows7-x64

1

2013年全...��.xls

windows10-2004-x64

1

2013年全...01.xls

windows7-x64

1

2013年全...01.xls

windows10-2004-x64

1

2013年全...02.xls

windows7-x64

1

2013年全...02.xls

windows10-2004-x64

1

2013年全...01.xls

windows7-x64

1

2013年全...01.xls

windows10-2004-x64

1

2013年全...02.xls

windows7-x64

1

2013年全...02.xls

windows10-2004-x64

1

2013年全...��.xls

windows7-x64

1

2013年全...��.xls

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    13e2b31eef9e71620c9bae1e7d29e9751e697e1dae957ae3fcfd0e55ab64a468

  • Size

    2.0MB

  • Sample

    221125-zw5ezsfa23

  • MD5

    016dd04d397d8a8f3b20844884283a8e

  • SHA1

    86331d3e8863774f9a408c02befe9dcf7832b516

  • SHA256

    13e2b31eef9e71620c9bae1e7d29e9751e697e1dae957ae3fcfd0e55ab64a468

  • SHA512

    5a1e5ef1e116fb75fd224ad95c74566c7be9918e2d9fae639758241274e3c55f2f32f0cda19c7c44a31815ba2aaebd8a6663de6008373c982ee033264cca1c82

  • SSDEEP

    49152:ESlRKC36kNDJlA4SvEUjlLvYpv9vxd547tG+scge2S3teRXkICD0k:RDqkNDJCTgxd54xGdfUtiK

Score
1/10

Malware Config

Targets

    • Target

      2013年全光乡镇FTTH接入工程-叙永县营山/2013年材料登记表.xls

    • Size

      35KB

    • MD5

      b14ca26b1740a2af423eaf49d55f790b

    • SHA1

      1f88d8fbef29e87c211022023124f56932c4b93e

    • SHA256

      446f6cb3635debf26105e137403b9399975853b05d98174927cffa234ac22bca

    • SHA512

      259df07b26f23bb44bbd5c943a61c21a991c0d33de95e721a9571e5a59d4496e941dc70a5a8f1bef76d8ef9356e6c4858a86e596a31f98b45b66952d6bc679fa

    • SSDEEP

      768:fNNNnTneNNuEwYBhWxNSyjBp48R2hZsZ95ls28vJPR7r9F:fNNNnTneNNuEwYBhWxNSyjBp4LaZ95y7

    Score
    1/10
    behavioral1behavioral2

    • Target

      2013年全光乡镇FTTH接入工程-叙永县营山/叙永县营山FTTH接入工程挂测.xls

    • Size

      28KB

    • MD5

      5c323a3ce3e81a8ba54d884cfa6515dd

    • SHA1

      daef50b7d22e410fb5031f6720ad475695ea0044

    • SHA256

      7dced5dfaec6aded1b42f4a4adbe4e56ad97577ae5ae6568665674de73c9ccc7

    • SHA512

      11cb264a0d4770473e251a40aa1a9291221a52608aaf5dd14332d8b059995d320104c09247e38fd3c636acfbd1b1cb98b24a46f0fdbcd4474a4831051f6ce615

    • SSDEEP

      768:B///F/B/0+C6rLsb/Agprja+R2wqZ959fJw8csQA0kQ2oo0mEkww8TAwGK7IcKBp:B///F/B/0+C6rLsb/AgprjagqZ95H

    Score
    1/10
    behavioral3behavioral4

    • Target

      2013年全光乡镇FTTH接入工程-叙永县营山/工程挂测模板GW001.xls

    • Size

      25KB

    • MD5

      9666ea6d6351d4bc032f0a878b392978

    • SHA1

      fa2c123b5b249c8f6b3745e94d24bbbda5e262c5

    • SHA256

      9b965e2611b83b4eadcf5f998918c76e1d2b142f249b32c380498ce9444331a7

    • SHA512

      3a0ac32c244a46b840fc4db4635267ffa06304219add3cf25790092542831251214bd92db50a03027e486ac8a73c3db7d3de6dc66de3af60309427f06060f355

    • SSDEEP

      768:4MMMOMSMH1xpAgfwMrL6AYJzR2wHZ95rfJtOev:4MMMOMSMH1xpAgfwMrL6AYJjHZ95r

    Score
    1/10
    behavioral5behavioral6

    • Target

      2013年全光乡镇FTTH接入工程-叙永县营山/工程挂测模板GW002.xls

    • Size

      26KB

    • MD5

      a709b83860a5698387c259bea02eb3db

    • SHA1

      82951d222ff578f0b27dc198b3bdccaa141e4755

    • SHA256

      ed5b488667d427bc623598ac91b36948d7b79ca2c2d33f27a25f2ca731e09edd

    • SHA512

      f03a4c08d88ac8d16157715ac64ffe4ffff91cc04e38fb76094d516cf9c3873c4f82cc6e8c1c1212e90ef5f12074885d6fa50d42894c217e5605ebeaa0046ff4

    • SSDEEP

      768:hZZZ7ZXZCA0c1VKlZ+eP1d84R2wXZ95XfJO79wTM:hZZZ7ZXZCA0c1VKlZ+eP1d8qXZ9545

    Score
    1/10
    behavioral7behavioral8

    • Target

      2013年全光乡镇FTTH接入工程-叙永县营山/竣工资料信息表GW001.xls

    • Size

      45KB

    • MD5

      31f0f90e27657878e8721a1c73d00846

    • SHA1

      669d82bdbcfdceaedec3609f515945a07b96221b

    • SHA256

      b84741146b63c6ee7a771ebbabeb70d02c4488f24e1c2a5f45cb67838e0b01a6

    • SHA512

      f82ac40c4b3ea18dbce7ec0e3c984ddc6cdfac862826c7b06168c8c71cdb40ffa0b142e2db9e983282d23706f1c995b60e8da62e69c633fda74cb385ee57f47c

    • SSDEEP

      768:5AXUKKKnasrs/gAV4vRpgGnJLQiy4KGB0ubGk77R2sCZ95fVqX0usFi6qPNc/mMV:3KKKnasrs/gAV4vRpgGnJLQiy4KGB0uO

    Score
    1/10
    behavioral10behavioral9

    • Target

      2013年全光乡镇FTTH接入工程-叙永县营山/竣工资料信息表GW002.xls

    • Size

      44KB

    • MD5

      0b6652d959107ac35f783d67254090fd

    • SHA1

      a3a743b49d8ccda82f37455ac7f39aa745a649ca

    • SHA256

      2badebd4cf4b41a8850c08d787379fc1d23e306d67051452db6ba052eaab7024

    • SHA512

      e33cb5494f4c1e3ec4f5b27c6f6255970c4038e85b41251ac2fe75b48c192d283f782da8f9b22f5dec1aad5cb2fda284132d4923f117bc50b58e64593ac13546

    • SSDEEP

      768:TAXmggg9QeZe1KqfiFDbK0975a4oigyTGcp0WFNR2szZ95FVqVDAKXbgi7qGrTml:rggg9QeZe1KqfiFDbK0975a4oigyTGcN

    Score
    1/10
    behavioral11behavioral12

    • Target

      2013年全光乡镇FTTH接入工程-叙永县营山/设备光路表.xls

    • Size

      17KB

    • MD5

      4784b6430cc9c9b858a96eb7826c6435

    • SHA1

      047d19e0b80d43f2ff83ee56af1de3aa2eb1b37e

    • SHA256

      b5897773d67482326893f40d3cbfe022be79101cd8a2b76936d49ff9fa9a9126

    • SHA512

      00af8987a118fb5f110466ca6604b51420274f584d875a8cb666e628a31de9462f1775e849ff2e976154fbcb634b858b7c563e5b8f52df0a7fe9ee6eb8fe11e6

    • SSDEEP

      384:YRRRMqjHGVMSBrEy4HUDYTj4xp1BuR2b2ctZam3sqZ3hqbp4/abbTKWX4/C+Z9Qq:YRRRMqjHGVMSBrEy4HUDYTj4xp1BuR2T

    Score
    1/10
    behavioral13behavioral14

MITRE ATT&CK Enterprise v6

Tasks