Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
27/11/2022, 00:08
General
-
Target
报恩寺路设计图/主要经济技术指标表1.xlsx
-
Size
22KB
-
MD5
1a3ed0058c984ee723db6a4ac65a4d48
-
SHA1
a0b05740c2e0cc2c5ca8953f37db7286292f4ffc
-
SHA256
6b55de878b28631fe22f9631497ebcc278d9eb008fbd3ebd30533cfe3f5079de
-
SHA512
dec9aafca5f4da35974fc8c1e41a9bd49790eee182ea3b2f2750bd08daecc14204be7fbb9fd9c1ed9a1c55d3360375cde37603b45bb4be4d05c69ceb498b8452
-
SSDEEP
384:jYyqtiQ/IZzlyPSgfLnOqZGT+pkDhP6pBTz4xwWL60obSmEGzeopwL4nyB:Up/vVTOqZGTFV67TMxJ0zXzeac
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 15 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\报恩寺路设计图\主要经济技术指标表1.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB