Resubmissions

13-02-2020 18:49

200213-1rnt9xv6f2 1

13-02-2020 18:42

200213-bsz7jwmhe6 1

13-02-2020 18:39

200213-zffwcb2g7j 1

Analysis

  • max time kernel
    37s
  • platform
    windows7_x64
  • resource
    win7v200213
  • submitted
    13-02-2020 18:49

Errors

Reason
Machine shutdown

General

  • Target

    Form.docm

  • Size

    260KB

  • MD5

    c2b48d21764b195fb0ebbdd3d1bdd89a

  • SHA1

    d8ca2aaba616f0281255a10634b6c4e17bb59336

  • SHA256

    186ec909dc32c982ab4bd6b257bb25a2726df856d4cf6c829e06683c352c92b2

  • SHA512

    c975a51bcf4cef1c345fcdadc59bd6b78ceeb96179b1c9621ef6070848f8452d8235b1d66223154edc7106cbe5d800e538a436c51e09f3828bf801849f740705

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Form.docm"
    1⤵
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:1984
  • C:\Windows\system32\LogonUI.exe
    "LogonUI.exe" /flags:0x0
    1⤵
      PID:1352
    • C:\Windows\system32\LogonUI.exe
      "LogonUI.exe" /flags:0x1
      1⤵
        PID:1528

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1528-13-0x0000000002C80000-0x0000000002C81000-memory.dmp
        Filesize

        4KB

      • memory/1984-0-0x0000000001FD0000-0x0000000001FD1000-memory.dmp
        Filesize

        4KB

      • memory/1984-2-0x0000000004B60000-0x0000000004B64000-memory.dmp
        Filesize

        16KB