Analysis
-
max time kernel
162s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
26-11-2022 03:09
General
-
Target
清单表/工行阳江分行营业综合用房 (地上部分)/工行阳江分行营业综合用房 (地上部分).xls
-
Size
127KB
-
MD5
464ec56ced84d9bb115e1cd03edf2cd5
-
SHA1
c81c1865b84303d2fa50d479e4d17bd5f46c03fd
-
SHA256
07902827b77edb1ce3925a19b0a24b2d2071f7da0120ac0e81c3723308608ae6
-
SHA512
cc910d3eff7e1aa7c9d0940b5b4b256f786e3d1a8c235e28716550d7762b52cfefc8333ab36774bb79108156b255e98d21987ad169801a7afb8b0f0f02fcf860
-
SSDEEP
3072:WgWgGXoWoC0x/cFizQK4WHiaRKcS29B6Yb07NRaH0hO7oFbsEYX:MUdp9BqQr
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 15 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\清单表\工行阳江分行营业综合用房 (地上部分)\工行阳江分行营业综合用房 (地上部分).xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB