3045a0410a648c72c32b3518de76c2515c2a25a83b49c50dd0f76b684e256cfc | Triage

Analysis

max time kernel
3s
max time network
3s
platform
windows10_x64
resource
win10v20201028
submitted
13-01-2021 05:41

Sharing

Report Analysis Logs

General

Target

3045a0410a648c72c32b3518de76c2515c2a25a83b49c50dd0f76b684e256cfc.doc
Size

156KB
MD5

8a27aa8fde8ffd61934113f5252cf437
SHA1

9e92fd2727622e65d147dc844001e88ee0a64040
SHA256

3045a0410a648c72c32b3518de76c2515c2a25a83b49c50dd0f76b684e256cfc
SHA512

d556efc56f27c738426503eb45aa33bf7cea254ac4d285c78e1ee28dc7adaf2697880e5864603d0be6bd60ee32bdc186b2ef0a5626b0bec7b5c031860d080cda

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

WINWORD.EXE

pid process

4756 WINWORD.EXE

C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\3045a0410a648c72c32b3518de76c2515c2a25a83b49c50dd0f76b684e256cfc.doc" /o ""
1⤵
- Suspicious use of SetWindowsHookEx
PID:4756

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4756-2-0x0000028FDF260000-0x0000028FDF897000-memory.dmp

Filesize
6.2MB

Download