Analysis
-
max time kernel
137s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
01-10-2022 21:07
General
-
Target
272a2c0f9409e6ae039fa0e968aeb5762a61e2a93a3d34fd2d4fc3d2a4e090a6.doc
-
Size
141KB
-
MD5
047dc5365f74adb731b20c6dd7727420
-
SHA1
32267f9cb62ff5c552f58be32543bfef3e47aac1
-
SHA256
272a2c0f9409e6ae039fa0e968aeb5762a61e2a93a3d34fd2d4fc3d2a4e090a6
-
SHA512
b82cfc0c4e7fa6a5f25ac44c3e3af318a7b8fbea2fa426ab218505e44e9ff611804d9e9a70b49b01bc26b892436b2b2c5728b0a1c733092ef19722fe5405e7b5
-
SSDEEP
3072:iEsEJk67D1RnF7zwai4HVDEL5EpKqZJZcpw1j/m0grtx:3sGk+D1RnFXw15OK2JCpwZe0ytx
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Script User-Agent 1 IoCs
Uses user-agent string associated with script host/environment.
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 9 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\272a2c0f9409e6ae039fa0e968aeb5762a61e2a93a3d34fd2d4fc3d2a4e090a6.doc" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB