Analysis
-
max time kernel
110s -
max time network
123s -
platform
windows10_x64 -
resource
win10-en-20210920 -
submitted
21-10-2021 17:59
General
-
Target
Purchase order_122.doc
-
Size
212KB
-
MD5
37ef290042de67ceede2ee41796fd288
-
SHA1
971ceccb966ae96811653501262562b2feb8d37f
-
SHA256
c342f81da05b8da1b9f40413ce605e06e02590ef4d2edfd1cafa8a464bd46a59
-
SHA512
7961f3527a0219b8d56a80e8710c06c3dcbcde78d96cb9a5e030e3aac92961b02e1ff63735f441aa820a47dab747aee1f338c3ebe5b2ec8f4f3450a3933bda3e
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\Purchase order_122.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
64KB
-
Filesize
8KB