2ac13e163b9bdd76aa1dd7ebcfc2dd9ddc6a32712c328889495637a5d0d2a5ea | Triage

Analysis

max time kernel
6s
max time network
7s
platform
windows10_x64
resource
win10v20201028
submitted
14-01-2021 06:22

Sharing

Report Analysis Logs

General

Target

IMG-0641.doc
Size

598KB
MD5

44c09f25925b3a659e19dae6b5e70cc5
SHA1

4eb7ae147669bdb3cc508efc1160fd820e662fa9
SHA256

2ac13e163b9bdd76aa1dd7ebcfc2dd9ddc6a32712c328889495637a5d0d2a5ea
SHA512

d9bdabf18d25ea6ac434c63062c8119ecc2c52fc76b4c31ccc5079f7c4ffd7472a43574aa614ed15bafd7655011221f79dba1657dcba81e8fd86f30c979c2579

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

WINWORD.EXE

pid process

576 WINWORD.EXE

C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\IMG-0641.doc" /o ""
1⤵
- Suspicious use of SetWindowsHookEx
PID:576

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/576-2-0x00007FFC30470000-0x00007FFC30AA7000-memory.dmp

Filesize
6.2MB

Download