13e2b31eef9e71620c9bae1e7d29e9751e697e1dae957ae3fcfd0e55ab64a468 | Triage

Analysis

max time kernel
356s
max time network
470s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 21:05

Sharing

Report Analysis Logs

General

Target

2013年全光乡镇FTTH接入工程-叙永县营山/叙永县营山FTTH接入工程挂测.xls
Size

28KB
MD5

5c323a3ce3e81a8ba54d884cfa6515dd
SHA1

daef50b7d22e410fb5031f6720ad475695ea0044
SHA256

7dced5dfaec6aded1b42f4a4adbe4e56ad97577ae5ae6568665674de73c9ccc7
SHA512

11cb264a0d4770473e251a40aa1a9291221a52608aaf5dd14332d8b059995d320104c09247e38fd3c636acfbd1b1cb98b24a46f0fdbcd4474a4831051f6ce615
SSDEEP

768:B///F/B/0+C6rLsb/Agprja+R2wqZ959fJw8csQA0kQ2oo0mEkww8TAwGK7IcKBp:B///F/B/0+C6rLsb/AgprjagqZ95H

Score

1^/10

Malware Config

Signatures

C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\2013年全光乡镇FTTH接入工程-叙永县营山\叙永县营山FTTH接入工程挂测.xls"
1⤵
PID:3976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3976-132-0x00007FF7E9530000-0x00007FF7E9540000-memory.dmp

Filesize
64KB

Download
memory/3976-133-0x00007FF7E9530000-0x00007FF7E9540000-memory.dmp

Filesize
64KB

Download
memory/3976-134-0x00007FF7E9530000-0x00007FF7E9540000-memory.dmp

Filesize
64KB

Download