Analysis
-
max time kernel
185s -
max time network
189s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
25/11/2022, 21:05
General
-
Target
2013年全光乡镇FTTH接入工程-叙永县营山/工程挂测模板GW001.xls
-
Size
25KB
-
MD5
9666ea6d6351d4bc032f0a878b392978
-
SHA1
fa2c123b5b249c8f6b3745e94d24bbbda5e262c5
-
SHA256
9b965e2611b83b4eadcf5f998918c76e1d2b142f249b32c380498ce9444331a7
-
SHA512
3a0ac32c244a46b840fc4db4635267ffa06304219add3cf25790092542831251214bd92db50a03027e486ac8a73c3db7d3de6dc66de3af60309427f06060f355
-
SSDEEP
768:4MMMOMSMH1xpAgfwMrL6AYJzR2wHZ95rfJtOev:4MMMOMSMH1xpAgfwMrL6AYJjHZ95r
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\2013年全光乡镇FTTH接入工程-叙永县营山\工程挂测模板GW001.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB