eef16a2d09261a6a3df60200c0bb2cedefbd0a45b7f6b8b450e1ed5de6ff7c94 | Triage

Analysis

max time kernel
6s
max time network
63s
platform
windows10_x64
resource
win10v20201028
submitted
14-01-2021 07:44

Sharing

Report Analysis Logs

General

Target

mensaje-2021.doc
Size

160KB
MD5

39cda08159967c20b76b8433fadd7ac5
SHA1

f00c940d7010f2ffdefd8ff8407717acde97c9b3
SHA256

eef16a2d09261a6a3df60200c0bb2cedefbd0a45b7f6b8b450e1ed5de6ff7c94
SHA512

a36627f550c0914b2710fbab87c1793f11af600774e61a18124949f1132fa7f058f1cfe71239621e0d55edbe9d15e4ffc571fb0008463142d1d8dedf71a0b035

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

WINWORD.EXE

pid process

4692 WINWORD.EXE

C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\mensaje-2021.doc" /o ""
1⤵
- Suspicious use of SetWindowsHookEx
PID:4692

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4692-2-0x00007FFCEDB10000-0x00007FFCEE147000-memory.dmp

Filesize
6.2MB

Download