Analysis
-
max time kernel
103s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
27/11/2022, 00:08
General
-
Target
报恩寺路设计图/路面工程数量.xls
-
Size
49KB
-
MD5
7d18c5589e55966451f5de33ec02b0dd
-
SHA1
2767ec5bc97b86ac290911ba16e36ae19fdee9dc
-
SHA256
6802e9b85db4440aa5c54785e2dc04d39d8b6f80043d9bc3f4ef6be526b9355b
-
SHA512
481f05ce397d5fafbf47122f84e2c3670b6920e50731909a88986de8792a6dc0c1bbefd9234ceea3c49fbdbcb4e98291681f9b439dd7eca613e5011826af260d
-
SSDEEP
1536:aC+yPpheeeeqtLzeQzJtV8cbsQvPe8k1SMrNgXNmYqN+:SyPB5+
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\报恩寺路设计图\路面工程数量.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB