Analysis
-
max time kernel
138s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
20-10-2022 13:19
General
-
Target
d5567136a96052d8e552efd7bc8b510177e2ae9ef7c8a7ccb97a29f854039d6f.doc
-
Size
34KB
-
MD5
811fd8b7523d2854c846d4a054b0cb30
-
SHA1
6d9ce615785ac27664f69449cf58248127d059a2
-
SHA256
d5567136a96052d8e552efd7bc8b510177e2ae9ef7c8a7ccb97a29f854039d6f
-
SHA512
e3b5f832ddeb45ababba1d7d5afa6b78a957e28bac390763051333618d03962cd17acd19744b6f43bc004ba336351749202f690852960aea6f8d8e67aaf5355a
-
SSDEEP
384:cVzxS3UeEq9cXj/wK96426Q8co4U00jUCVt:covqXm0QQmV
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 7 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\d5567136a96052d8e552efd7bc8b510177e2ae9ef7c8a7ccb97a29f854039d6f.doc" /o ""1⤵
- Drops file in Windows directory
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB