577a13b37fa869efdd7b55c2b4adf57862b97dabff23b60f00d21b212cc06d6f

Analysis

Score

N/A

Drops Office document 2 IoCs

dropper exploiter maldoc

Processes:

WINWORD.EXE

at	description	ioc	process
4899	File created	C:\Users\Admin\AppData\Roaming\Microsoft\Templates\~$Normal.dotm	WINWORD.EXE
6115	File created	C:\Users\Admin\AppData\Local\Temp\~$cs_4d7f6c717c10153e88fa16eccc9de81c.44.docx	WINWORD.EXE

C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
"C:\Program Files\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Docs_4d7f6c717c10153e88fa16eccc9de81c.44.docx"
1⤵
- Drops Office document
PID:1580