Analysis
-
max time kernel
188s -
max time network
195s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
27/11/2022, 00:08
General
-
Target
报恩寺路设计图/第一册.doc
-
Size
27KB
-
MD5
ce876f05738b9798e206702cb4d28f47
-
SHA1
acd5fb475f982a6808832f59f2db4f1624411e21
-
SHA256
185b2607cbb71b271937d73c42bc6c7edd45375da77f17512364d2765a5c374a
-
SHA512
d8afb5fa3d8ee6bc8eec9709da7fcaf55227c53892dbcbe5e5426d6903df8c3e6ca54feafbf5971eb004a16b7f30b1f9a9edbd0a6085b79df3ef36a9c0c2e476
-
SSDEEP
384:espppldp6O0trbLIyGcSxwAjLGgEC65PA:EhL4ft65
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 16 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\报恩寺路设计图\第一册.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB