Analysis
-
max time kernel
190s -
max time network
202s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
27/11/2022, 00:08
General
-
Target
报恩寺路设计图/路基超高加宽表1.xlsx
-
Size
21KB
-
MD5
81af8912c3eb68433374a87e24206733
-
SHA1
054ba66882e104544b75355145533873b2443587
-
SHA256
41b998aa0ca58c3f9b2ec49800e5cf261f88b36cf3d929074478b94e09e6a3b4
-
SHA512
266f7197a924c882153fa4d2f223c54829ea788e07b2e65527c553cb231abc110ae0d7a3775e3a3fddea105ef140665b86c204870d4881c2a790876713ee628a
-
SSDEEP
384:6vHvJg8uWA7Wf4v1Q/h/T3f25hnOf4md0M:6fvdNA7QW1QhCXOf4mdL
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\报恩寺路设计图\路基超高加宽表1.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB