2cfe2dfff6ceecc5b57f1f3585b9aa4ba0bb2724bdc3a142519494e36f2f7cf7 | Triage

Analysis

max time kernel
6s
max time network
7s
platform
windows10_x64
resource
win10v20201028
submitted
13-01-2021 13:40

Sharing

Report Analysis Logs

General

Target

dati 1301 012021.doc
Size

160KB
MD5

50667a6f18771fa2457d7aac148e5c39
SHA1

b1b865dfdcd99bfd1c9a13420e3da0c43dadcd71
SHA256

2cfe2dfff6ceecc5b57f1f3585b9aa4ba0bb2724bdc3a142519494e36f2f7cf7
SHA512

f339b88c21c4c809cbb85f677b1a7a1a3fafce4e30d8061b3bdeaae21c9985b51afe96c7ae034110bca9b4d42a7771422d2fb7b17aaf2cd5806655df9228c638

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

WINWORD.EXE

pid process

508 WINWORD.EXE

C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\dati 1301 012021.doc" /o ""
1⤵
- Suspicious use of SetWindowsHookEx
PID:508

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/508-2-0x00007FFE95D50000-0x00007FFE96387000-memory.dmp

Filesize
6.2MB

Download