Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
23/03/2025, 11:50
General
-
Target
南沙万顷沙镇水窦工程量清单/南沙万顷沙镇水窦/11#水窦/表3—1 封面.xls
-
Size
16KB
-
MD5
107fcba4b4e0dd50a24aeeb3c9fec45a
-
SHA1
241e10332826e56812d83b33eef4f2a32e792d4a
-
SHA256
bd68adb6a55d24c3630c15aa52a017fc582ef5d809dbf2134d341e7d2ed10814
-
SHA512
8efd5d2d188006d9870b5d3638a590b18b1d613e1aeaa2d17745d1268ea525025f32298ab863aeea31f4b571ebf0d44270a3e54f6cbf0ba3a540d17c8f19cc28
-
SSDEEP
96:KYhZ2G2pBOVR2lNIUmdjqYwIZRiQ6RycvyxKz/cb2BaZHeZlQegRT:KYhZ2G2pBWR2THLR/vyy6egJ
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\AppData\Local\Temp\南沙万顷沙镇水窦工程量清单\南沙万顷沙镇水窦\11#水窦\表3—1 封面.xls"1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5fe2e9124ddeee3bd333ce5a51affe22c
SHA14e61f5e1d5a2a05184ae9b1b25bd24945be9558e
SHA256d9faef23e74adfa7a68648ff5c1da3b09552ad28eb663f9be15a90c28421b796
SHA512ce7be8e25bc69750011c8f0cf9a89ef289424dc84a0f93a02999e5008656a6f62b1ad5209f106623b789cb4dc7fc79786930f401b2aa9979a669e7a3e533292d
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
4KB