Analysis
-
max time kernel
151s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
27/11/2022, 00:08
General
-
Target
报恩寺路设计图/低等级直曲表1.xlsx
-
Size
25KB
-
MD5
e6645e979166e188392cff0c06c91f97
-
SHA1
a4832b8a5edd5285a28848a40de7090976d5ed94
-
SHA256
d944e44fefe710b818915e34dafa973a8e3aa72000c2387fbd8bb0aa71ecff95
-
SHA512
def864ef2a89aba387752d9cca8601d9e354ab8ea42754e62bf8bb19dc4b6c2d7105f1f9559f539616194002c439c46de29a3f01196356e985187a8e24ef1994
-
SSDEEP
384:NhsjFxARK1LbhpoZyUH1V+jzeZqqOz5NuMyXrEQBGJc2A+VjFpB8kbucnO1YL:NhvKlbhpoZyUVVVZq3t4Q0GXA+1TucO6
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\报恩寺路设计图\低等级直曲表1.xlsx"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB