Analysis
-
max time kernel
102s -
max time network
106s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
02/04/2023, 23:13
General
-
Target
zjgh.zjt.gov.cn_module_download_downfile.jsp_classid=0&filename=7e9be188c7544d10b8b57823253987c1.doc
-
Size
60KB
-
MD5
c9021d148c896c7804050feaf203320f
-
SHA1
851afab8e0e12c8691ca3bec4d1b43ae37f16714
-
SHA256
f9cf289b667d21ff4ee978f8af06440ffd4a58735adfe6f1208778f9011cb786
-
SHA512
b648c906d23765de6d90aeaa14afc28a64569621528f897df302b999229f166ba70285c3afc29ffcb06663773b6a78ae0b04154895bc36880df52a975523093a
-
SSDEEP
768:wGj18eN0APoZ4zozwXDgxz99tLuuu7LIO:wGpCAPoGscDg3nuuu7L
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 16 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\zjgh.zjt.gov.cn_module_download_downfile.jsp_classid=0&filename=7e9be188c7544d10b8b57823253987c1.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB