Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7 -
submitted
11/07/2020, 07:24
General
-
Target
caricare,07.20.doc
-
Size
134KB
-
MD5
8f970304783c8aa3d23f287b4be714eb
-
SHA1
e0c30b6e95c686c663878e16b067418e4e0ef6c9
-
SHA256
00ea129930da0a14d84e659de72d16b4edcb9574ab665466e6b931676fe95aed
-
SHA512
0f58e98169975eca6009b83028ca80defbeb638232aba07da9bf873e04c57c4d780eb5e3e71cdfe8096700a097a398b4cb3733dce8816676f2b24abef13e46b2
Score
10/10
Malware Config
Signatures
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 16 IoCs
-
Process spawned unexpected child process 1 IoCs
This typically indicates the parent process was compromised via an exploit or macro.
-
Suspicious use of WriteProcessMemory 5 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Office loads VBA resources, possible macro or embedded object present
Processes
-
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE"C:\Program Files\Microsoft Office\Office14\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\caricare,07.20.doc"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\regsvr32.exeregsvr32 c:\programdata\26785.jpg2⤵
- Process spawned unexpected child process
- Suspicious behavior: GetForegroundWindowSpam
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB