Overview

overview

8

Static

static

8

附件1、...��.xls

windows7-x64

1

附件1、...��.xls

windows10-2004-x64

1

附件1、...��.xls

windows7-x64

1

附件1、...��.xls

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    504ab2bdd0b80594f7964a6bd4515afb7421e19d9aec9d26a87e69a5533714b0

  • Size

    12KB

  • Sample

    221127-ar3m6aba7x

  • MD5

    048210dabf5c28cd343072eeb493017d

  • SHA1

    e5c60cf55d918f7b0f024896b45f1e554b7b66ab

  • SHA256

    504ab2bdd0b80594f7964a6bd4515afb7421e19d9aec9d26a87e69a5533714b0

  • SHA512

    aaf1f1e06a4c3de7017fcccd4a96bf7498317cbeee792a242bd4513301771d715d4c039c447b98fb8bd7b43097dbd61cd8f09dbe6503f01d7440c79e45fb76e6

  • SSDEEP

    384:k/BKNqdRVsGoREf6X/dFXBPfNpKhfNOjuy0iWygav:wBKN0VFkEi1FRHvKhfUSlo/v

Score
8/10
macroxlm

Malware Config

Targets

    • Target

      附件1、3/附件1：2011年度黑龙江工程学院教育科学规划课题论文成果登记一览表.XLS

    • Size

      33KB

    • MD5

      67276304d28e21007d2c88f3d21236f2

    • SHA1

      87d89d55da30793cfbbb5969e53bec791facd026

    • SHA256

      389386c5ce63fcbac2563ba22b1419c530c33ec19781aba14340fa529c5239c9

    • SHA512

      a057e75bd8fc0e12e512bbb88445102cba78b8facae0e5678bacf382f98e66c3731357823220c48503aa475555b475004be12e5a94e88c43e23a34a62943485e

    • SSDEEP

      768:Eqqqe/XCI6DhcX7AmBZw/FvInc9Acb7qwcI5W1mR2DEUucBR1xge+D5VU3B:Eqqqe/XCI6DhcX7AmBZw/FvInc9Acb7A

    Score
    1/10
    behavioral1behavioral2

    • Target

      附件1、3/附件3：黑龙江工程学院2011年度教育科学规划课题立项一览表.XLS

    • Size

      21KB

    • MD5

      635166e346a16b6828006b5c674736e9

    • SHA1

      a032c73987c34f0e48cd453ba79d7c882eb13c6f

    • SHA256

      4d91ae4055e01193f84c71f514b55bca0defd73a78fe29a2b21701cc617b2668

    • SHA512

      18c32fcfe19fb7d53842d065c60d38ef60c9179c23a377ac42ffb85faa0c481fe9e565f6b725c080e646954fbe045bddeb4978a1877cdac26d083e2fdd8de6da

    • SSDEEP

      192:Uk1ZpdpdpdpdnX5Ge0aR221Wu8hhPPPPPPPPPPq5HENbSsL2h+KVUNFrZQ9iV4:ZZzzzznX5G7aR20WQEJ0h+EUCh

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

4
T1012

System Information Discovery

4
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks