Analysis
-
max time kernel
103s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
26-11-2022 03:09
General
-
Target
清单表/工行阳江分行营业综合用房 (地上部分) 防雷工程/工行阳江分行营业�.xls
-
Size
53KB
-
MD5
35bd4eb2f94ebc293e55ba6224390511
-
SHA1
447bec0b0bc1ca5efa32fd964313246f02e9465d
-
SHA256
100251a6fe3c7c909c84aa40b977d434d76b21cb1eac8623db88b2b2b559101d
-
SHA512
11939d53deab061d2ac4b6f00d94851642f7e6fbfdbab85b92c1f14c19088888a1caf60d2a6a08f7c68347f8ea58cdee0f6b6c97fd9a05df7c30ca4a3b4acfa6
-
SSDEEP
1536:uRbJJJJJJJJJJ8P/Aw6YRkaTkejlENIAWn:+m
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\清单表\工行阳江分行营业综合用房 (地上部分) 防雷工程\工行阳江分行营业�.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB