Analysis
-
max time kernel
155s -
max time network
196s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
27/11/2022, 00:08
General
-
Target
报恩寺路设计图/竖曲线表1.xlsx
-
Size
17KB
-
MD5
837134597f3faa5d3a1ebc496af49028
-
SHA1
0cdbdd9f10d123afd4ea99d075501f29a98d29e7
-
SHA256
b9b7318348b9598f8c4d19e23528a439efafbdcfaad448f1b91a24204018bd20
-
SHA512
fd888aa1fcfc15513cfd04fc4f8a078e81671f9df7d9c2d7181a5b68c448c97cec24b7e5c235a37e1fb1b2c85ac11c0d8b72e8731cd8ea26051ad5d61700e679
-
SSDEEP
384:pIHO4XuK/0CrFbb99E/Ca6O9Mr4jD+XnOQ+/Yg:pIHjXiEe/C4e4jDoOQ2Yg
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\报恩寺路设计图\竖曲线表1.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB