Analysis
-
max time kernel
171s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
27/11/2022, 00:08
General
-
Target
报恩寺路设计图/用地表1.xlsx
-
Size
24KB
-
MD5
3b8461c237c6f5ecd97d3b25baf27e97
-
SHA1
4fdd1f6f90e98b515418bf4f62ab5f0c27e5daf0
-
SHA256
b7d21a8a3aba089f98b42ef3b3bed4d085b54b617e3e93a257cebc649a945807
-
SHA512
b127fc92d4c23738fc0c5e750da94851fb57caebbc9a27a67f4b491c4b4f335a79335664b81d90d20e6de7322ce836cf12fbc12f6d8d8869a09c09000673bff9
-
SSDEEP
768:fm+WGi9hIIuXImB1kF09k6Oc4T5Bo9OpvfGh:fVWbbYJC09k55TfW
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\报恩寺路设计图\用地表1.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB