Analysis
-
max time kernel
153s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
26-11-2022 12:42
General
-
Target
开心炉石 V3.51_破解版/使用前必看.doc
-
Size
638KB
-
MD5
9398f1e04bf34b39c56ee2d0823b9d9e
-
SHA1
926365f2186b0a63e5d5b42933499f42df993344
-
SHA256
10db95c9a3235bd88f7cf5e6d9da3aabb9461da6bbd6515701ef3e66656a92fd
-
SHA512
143d24888eb28d4ee436b4ec6e6d63658bebd931de98ea1b429d07f2e486e92ac60d55b7cf4ff53094c87dad72c72812a58c403c0ce03069cdc0eccd62e6e2fc
-
SSDEEP
12288:EN9fHq6WBhPtK6s/c6F79SGsYMAp1tXSiZEYw2XGarRjNAJW4QoFB1v:MtTWBhDG/VAcMAp14ehNA4K
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 16 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\开心炉石 V3.51_破解版\使用前必看.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB