Analysis
-
max time kernel
180s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
27/11/2022, 00:08
General
-
Target
报恩寺路设计图/水泥路总说明.doc
-
Size
120KB
-
MD5
0f00aaa7e2f0687011e442d96e3937a1
-
SHA1
ad7427fe0f37d416d9342d98136f3701de87fd2a
-
SHA256
b31e4db9104fb506f1df9e2941d37ce60b977aa5e1c72e1ebd9ad6e14eaa307b
-
SHA512
b7001928b315a484839dff804c53f4d1666a3316db97313fc15f7c92f5075961dbd55952b9be4f1264b5658a87735217ab8a355d389bfde8ecab891ed40d1a58
-
SSDEEP
768:kZDGgjCSp2Rwte/nOL+v6vF3e7VpM4iNRyXjZQR2X2UWR+fBh3oDncsy5/8u5RlJ:apibyCVpMvUueBhucsy95Rlak
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 17 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\报恩寺路设计图\水泥路总说明.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB