popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

20231025_정책간담회 사례비 양식.hwp

GIF Format MSOffice File Lnk Format HWP
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6402 Sept. 14, 2023, 7:02 p.m. Sept. 14, 2023, 7:04 p.m.
Size 38.5KB
Type Hangul (Korean) Word Processor File 5.x
MD5 df53040b208a5ac37ad207ddfd828bb0
SHA256 ac1eacda937e6e30ef1fdff5e6ed2ad83fedb1c7da8043954540f6e67eebb58a
CRC32 CF5E6A24
ssdeep 384:8Jxv2xOfJufDdvjYmbiFSIKQ7R5xh2+OdVxfi+RuB6b/Zd7C3dea:guxCGF8mbiFSC6o6b/ue
Yara
  • HWP_file_format - HWP Document File
  • Microsoft_Office_File_Zero - Microsoft Office File

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

IsDebuggerPresent

 0 0
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

 process_identifier: 2192
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x73e62000
process_handle: 0xffffffff
1 0 0
file C:\Users\test22\AppData\Roaming\HNC\Office\Recent\20231025_정책간담회 사례비 양식.hwp.lnk
file C:\Users\test22\AppData\Roaming\HNC\Office\Recent\Temp.folder.lnk
file C:\Users\test22\AppData\Roaming\HNC\Office\Recent\20231025_정책간담회 사례비 양식.hwp.lnk
file C:\Users\test22\AppData\Roaming\HNC\Office\Recent\Temp.folder.lnk